Don't you intermix "device" (module) and "slot"?
i guess i don't. I just meant this condition: https://github.com/SSSD/sssd/blob/8e8ccca5d647b373ce633df18578376df0681473/s...
When token has more than one removable slot in that place we don't try to find certificates for another removable slot. I faced with problem when my certificate located in second removable slot.