On Wed Feb 26 17:11:14 2014, pspacek@redhat.com wrote:
> $ dnssec-keyfromlabel -l test-ksk -f KSK -v 10 -a NSEC3RSASHA1 test.
> pk11.c:601: fatal error: pkcs_C_Login: Error = 0x000000A0

=> CKR_PIN_INCORRECT

(perhaps a side-effect of the new URI stuff, BTW I guess
you don't set an empty password so "test-ksk" is no enough).