centralized the management of iaikPkcs11Wrapper
use only RSA 2048-bit keys for SSH, corrected the script in setenv
adapt the license header