Simplify pkcs11 token generation
    
    Make default secure enough, no predefined pins are used. Generate pin
    and save it into file protected by unix rights. HSM tools will probably
    require it anyway. Use smart defaults.