hcrypto-pkcs11: check mechanism flags