`onepin-opensc-pkcs11.so` only enables PIN1, but PIN2 is also required. `opensc-pkcs11.so` enables all slots. I can successfully use PIN1 and PIN2 in Smart-ID cards with this.