pkcs11 module outside of crypto framework

[Glenn Barry]

This came-up in the pkinit discussions yesterday:

Does a pkcs11 module outside the crypto framework (that is, not 
installed via cryptoadm) need to be signed in order to be used (legally) 
by an OpenSolaris app (kinit(1) for example)?


thx.