The -E option does not default to pkcs11 if --with-pkcs11 is set, but always needs to be set explicitly.