To correct

Mar 24 21:23:34 registry1.1.quietfountain.com pcscd[639]: 99999999 auth.c:137:IsClientAuthorized() Process 21266 (user: 971) is NOT authorized for action: access_pcsc

and related with dirsrv and pkisuer

create

/etc/polkit-1/rules.d/00-rss_allowpkiuser.rules

with

polkit.addRule(function(action, subject) {
if (action.id == "org.debian.pcsc-lite.access_pcsc" ||
action.id == "org.debian.pcsc-lite.access_card") {
if ((subject.user == "pkiuser") || (subject.user == "dirsrv") || (subject.user == "ipaapi")) {
return polkit.Result.YES;
}
polkit.log("action=" + action);
polkit.log("subject=" + subject);
}
});