CKR_PIN_INCORRECT
return soft_token.flags.login_done ? CKR_OK : CKR_PIN_INCORRECT;
case CKR_PIN_INCORRECT: