set the hsm befor loading linotp config, so it is decrypted

the hsm must be loaded before the linotp config, so the
linotp config as well contains the decrypted values

Change-Id: I969d6ad59258bd05147573735a3c9778b9a0ec5b