[Bug]: step ca renew --force incorrectly invokes step-kms-plugin on Debian 12

[subs-comps-git]

Steps to Reproduce

step ca renew -f
succeeds

step ca renew --force
fails with:
exec: "step-kms-plugin": executable file not found in $PATH

Ubuntu 24.04 with the same step-cli version/build:
both commands succeed

Your Environment

• OS - Debian 12 (Bookworm)
• step CLI Version -
  Smallstep CLI/0.30.6 (linux/amd64)
  Release Date: 2026-06-10T20:39:13Z

Expected Behavior

Both flags should behave the same regardless of operating system as documented.

Actual Behavior

On Debian 12 -
step ca renew -f
succeeds

step ca renew --force
fails with:
exec: "step-kms-plugin": executable file not found in $PATH

Ubuntu 24.04 with the same step-cli version/build:
both commands succeed

Additional Context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).