Accept PKCS#11 URIs as serialized token/certificate IDs

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Serialize to standard PKCS#11 URIs

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>