crypto pam Build the card_eventmanager binary used to detect card removal and lock the sessions. This needs sys-apps/pcsc-lite. Use Mozilla NSS (dev-libs/nss) as provider for PKCS#11 access, rather than using OpenSSL with a custom implementation of the PKC#11 protocol.