IKEv2 with EAST using a PKCS#11 token from an external store
