Add support for more than one HSM slot and label for signing nodes to request signatures from an HSM.

We could do with a simple fallback mechanism (use the next slot+label when the current fails) or a more elaborate load balancing scheme (picking one of several configured slot+label combinations at random every time we ask for a signature).