mkimage: Add support for signing with pkcs11