As discovered by szikora@, PINs cannot be specified in Access Rule Lists
(ARLs) with the backtracking bit set once CardOS 5's ServicePack is
installed, for security reasons.