macosx: add new tool and SDK paths for OS X 10.8

Also:
 * Don't do a debug build
 * Don't download Tokend build pieces if already present.
 * Check the md5 of the "external binary"

See https://github.com/OpenSC/OpenSC/pull/148
tools: missing names for ACL methods

thanks to fdeybach@gmail.com
https://sourceforge.net/mailarchive/message.php?msg_id=30684430
pkcs11-framework: do not wrap subject in a second ASN1 sequence

In a supplement to f5d53ab01783b0c37802e35f063fdbe5814bdbc7.

Subject and Issuer, returned by pkcs#15 framework, are already encoded as ASN1 sequence.
No need to wrap them in a second ASN1 sequence frame.