libnpa: requires an ID card that is initialized for QES. Today, this
means you need to register at sign-me.
virtualsmartcard: We don't actually create a real signature, because
PyCrypto can't handle ECDSA, let alone brainpoolP256r1. We only return a
64 byte buffer.
