Just to follow up on this discussion, after much discussion, the OpenSC project has set the same default as I requested in this bug report for their pkcs11-tool:
Discussion: https://github.com/OpenSC/OpenSC/issues/229 Accepted commit: https://github.com/OpenSC/OpenSC/pull/346
signature.asc
Description: OpenPGP digital signature
