Purely by accidient I came a cross two sets of Python bindings for PKCS#11 today.
http://www.bit4id.org/trac/pykcs11 http://pypi.python.org/pypi/pkcs11 O haven't yet looked at any of them but thought they might be interesting things to include - particularly for use by pkg(5) in its manifest signing. -- Darren J Moffat