CKM_AES_CTR is currently only available to kernel users.
It should be available to non-kernel users via libpkcs11
now that it is an official mechanism in PKCS#11 v2.20 amendment 3.
This means updating /usr/include/security/pkcs11t.h and the table
that maps mechanism names (strings) into PKCS#11 numbers.