pkcs11: gate functions by attributes

Make sure we have CKA_SIGN set to sign keys and CKA_DECRYPT set to
decrypt from them.

Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>