Mostly following existing logic for PKCS#11 - turning off support when either libcrypto or dlopen(3) are unavailable.
Supports enrolling (generating) keys and signatures. feedback & ok markus@ OpenBSD-Commit-ID: 73d1dd5939454f9c7bd840f48236cba41e8ad592