% rfkill  list
0: tpacpi_wwan_sw: Wireless WAN
        Soft blocked: yes
        Hard blocked: yes
1: phy0: Wireless LAN
        Soft blocked: yes
        Hard blocked: yes

But still, when resuming from suspend-to-RAM, I get a prompt for the PIN
code!

See an excerpt from /var/log/NetworkManager below, where I first
send the system to sleep at 23:10:26 and then wake it up at 23:10:55.

2015-03-01T23:10:26.305298+01:00 tuna NetworkManager[17203]: <info>  sleep
requested (sleeping: no  enabled: yes)
2015-03-01T23:10:26.305730+01:00 tuna NetworkManager[17203]: <info> 
sleeping...
2015-03-01T23:10:26.306048+01:00 tuna NetworkManager[17203]: <info>  (enp0s25):
device state change: unavailable -> unmanaged (reason 'sleeping') [20 10 37]
2015-03-01T23:10:26.597979+01:00 tuna NetworkManager[17203]: <info>  (wl):
device state change: unavailable -> unmanaged (reason 'sleeping') [20 10 37]
2015-03-01T23:10:26.598287+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): device state change: unavailable -> unmanaged (reason 'sleeping')
[20 10 37]
2015-03-01T23:10:26.598487+01:00 tuna NetworkManager[17203]: <info> 
NetworkManager state is now ASLEEP
2015-03-01T23:10:55.900692+01:00 tuna NetworkManager[17203]: <warn> 
(cdc-wdm1): failed to look up interface index
2015-03-01T23:10:55.907336+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): device state change: unmanaged -> unavailable (reason 'none') [10
20 0]
2015-03-01T23:10:55.911442+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): deactivating device (reason 'none') [0]
2015-03-01T23:10:55.912025+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): modem state 'locked'
2015-03-01T23:10:55.912505+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): new Broadband device (driver: 'cdc_acm, cdc_mbim, cdc_wdm' ifindex:
0)
2015-03-01T23:10:55.912956+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): exported as /org/freedesktop/NetworkManager/Devices/14
2015-03-01T23:10:56.983338+01:00 tuna NetworkManager[17203]: <info> 
ModemManager disappeared from bus
2015-03-01T23:10:57.025263+01:00 tuna NetworkManager[17203]: <info> 
ModemManager disappeared from bus
2015-03-01T23:10:57.043254+01:00 tuna NetworkManager[17203]: <info>  wake
requested (sleeping: yes  enabled: yes)
2015-03-01T23:10:57.043753+01:00 tuna NetworkManager[17203]: <info>  waking
up...
2015-03-01T23:10:57.044112+01:00 tuna NetworkManager[17203]: <info>  (enp0s25):
device state change: unmanaged -> unavailable (reason 'managed') [10 20 2]
2015-03-01T23:10:57.272133+01:00 tuna NetworkManager[17203]: <info>  (enp0s25):
preparing device
2015-03-01T23:10:57.272434+01:00 tuna NetworkManager[17203]: <info>  (wl):
device state change: unmanaged -> unavailable (reason 'managed') [10 20 2]
2015-03-01T23:10:57.272642+01:00 tuna NetworkManager[17203]: <info>  (wl):
preparing device
2015-03-01T23:10:57.273452+01:00 tuna NetworkManager[17203]: <info> 
NetworkManager state is now DISCONNECTED
2015-03-01T23:10:57.273681+01:00 tuna NetworkManager[17203]: <info> 
ModemManager available in the bus
2015-03-01T23:10:59.890766+01:00 tuna NetworkManager[17203]: <warn> 
(cdc-wdm1): failed to look up interface index
2015-03-01T23:10:59.892740+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): device state change: unmanaged -> unavailable (reason 'none') [10
20 0]
2015-03-01T23:10:59.894410+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): deactivating device (reason 'none') [0]
2015-03-01T23:10:59.894566+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): modem state 'locked'
2015-03-01T23:10:59.894702+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): new Broadband device (driver: 'cdc_acm, cdc_mbim, cdc_wdm' ifindex:
0)
2015-03-01T23:10:59.894841+01:00 tuna NetworkManager[17203]: <info> 
(cdc-wdm1): exported as /org/freedesktop/NetworkManager/Devices/15