test that replica pub key has CKA_WRAP = TRUE