What is the problem you want to solve?

There's no way to output generated identity without annotations. The most cleanest solution I've found is this:

MINIO_IDENTITY="$(kes identity of client.crt | tail -n 1 | tr -d '[:blank:]')"

How do you want to solve it?

MINIO_IDENTITY="$(kes identity of client.crt --plain)"

or

MINIO_IDENTITY="$(kes identity of client.crt --json | jq -r '.identity')"

Additional context

1. Are there alternative solutions?

Piping output

2. Would your solution cause a major breaking API change?

No

3. Anything else that is important?

This creates unnecessary complexity for automation