Disable creation of OpenPGP keys for card keys if NKS PIN has not set

As long as the NKS PIN is not set (i.e. the NullPIN has not been changed),
the attempt to create an OpenPGP key for the card keys (which requires a
few signing operations) fails with "Conditions of use not satisfied".

GnuPG-bug-id: 5128