pkcs11:object=my-key;type=private?pin-source=file:/etc/token