what hardware token support does the implementation that is now called the guard tls toolkit use ?
pkcs11