add libhsm configuration option <AllowExtraction/>

This option allows user to generate private keys with CKA_EXTRACTABLE
flag set to TRUE. Defaults to FALSE.