So then something like this? X509_user_identity=PKINIT:module_name=/usr/lib/pkcs11.so:slotid=4:id=45:label=Cert1