Don't you intermix "device" (module) and
"slot"?
i guess i don't. I just meant this condition:
https://github.com/SSSD/sssd/blob/8e8ccca5d647b373ce633df18578376df068147...
When token has more than one removable slot in that place we don't try to find
certificates for another removable slot.
I faced with problem when my certificate located in second removable slot.