pam_pkcs11 is needed for SC-based authentication,
let's carry it as well.

Note that further configuration is still required.