Stopped reporting CKM_SHA1_RSA_PKCS as a supported mechanism -- it was never actually supported