The SunPKCS11 provider currently calls C_Sign() with a NULL buffer in order to determine the buffer size. This causes interoperability with a few buggy tokens. As a workaround, we should use a stack buffer, as we already do in a few other functions.