Specifically, don't use $< now that we have the openssl config file as
our first dependant.

Also, no .pem on sigfile names.

This should be more stable.
It's used in openssl.direct.cnf too.

We already do that in target softhsm/tokens.

Also, do create the token directory.