add instructions for SunPKCS11 provider