PKCS11: Defer release of session objects to release of token resources