p11-kit provides a way to load and enumerate PKCS#11 modules. It implements a standard discoverable configuration for installed PKCS#11 modules. (this is needed for an upcoming gnutls update) ok jasper@