CKF_SECONDARY_AUTHENTICATION
if (flags & CKF_SECONDARY_AUTHENTICATION)
metainfo.flags &= ~CKF_SECONDARY_AUTHENTICATION;