Finally I've captured logs from PKCS11. tokend: see the file attached. 

I'd like to note, that there is no log activity during the selection of certificate in VPN client. 

Activity logged corresponds to viewing the certificates in the keychain and signing e-mail.