Hi Bose!
I will open a ticket. We tried with Gemalto C700 reader which has a pinpad, also we are
waiting on an order from card contact with more readers of different brands to see if they
behave the same way.
As a comment, if we are going back to the old pam_pkcs#11, which we do not want to do,
then it actually works, but then we hit another challenge, that thing is not able download
revoked certificates from IPA, and if downloading them using curl or wget it still can not
read revoked certificates.