security/pkcs11-tools: Properly set BROKEN on 11.x with OpenSSL 1.0.x

Another case of wishful thinking. In reality the framework does
not support a BROKEN_SSL_11 at the moment.

Reported by: portscan