???Was just doing some testing going through the different kinit and PKCS11 opts to make sure everything is working ok. One of the options which can be given as an argument is a path to a libpkcs11 library to use (for e.g. -X PKCS11:module_name=/tmp/libpkcs11.so.1). kinit is already linked against /usr/lib/libpkcs11.so.1. Won't bad things happen if we dlopen() another libpkcs11.so and start trying to call functions from it? Do direct bindings or anything get us anywhere here? I don't have a second libpkcs11.so on my system so and things don't seem to blow up if a copy of libpkcs11.so is given as an argument to kinit. I guess potentially the libpkcs11.so from opensc could be given as an argument..
Thoughts?
