Add a note in "EJBCA Integration with a SmartCard-HSM" about policy-kit

[Tazmaniac]

Is your feature request related to a problem or specific use case? Please describe.
On recent debian/ubuntu hosts, pcscd is compiled with policy kit support.
The proposed integration is not working because the UID used in the running ejbca container (10001) is not allowed to access to the pcscd socket

Describe the solution you'd like
/etc/polkit-1/rules.d/01-ejbca-container.rules
polkit.addRule(function(action, subject) {
if ((action.id == "org.debian.pcsc-lite.access_pcsc" ||
action.id == "org.debian.pcsc-lite.access_card") &&
subject.uid == 10001 ) {
return polkit.Result.YES;
}
});

Describe alternatives you've considered
Or disable policy kit support in pcscd: add "--disable-polkit" to PCSCD_ARGS in /etc/default/pcscd

[svenska-primekey]

Hej @Tazmaniac are you interested in creating a PR with this information to contribute to the repo?

[Tazmaniac]

Will try to find the time to propose something in a PR.