PKCS11: Improved hotplug stability with deferred resource deallocation