pkcs11: Change how unavailable attributes like CKA_TRUSTED are handled