I found another severe problem with the old ykman:
If you enabled the "kdf" then you cannot use the admin PIN any more as even
when entering the correct PIN, the error count will increase.
Like this:
#PIN retry counter : 3 9 9
#KDF setting ......: on
> ykman openpgp set-pin-retries 9 9 9
Enter admin PIN:
Set PIN retry counters to: 9 9 9? [y/N]: y
Error: Invalid PIN, 8 tries remaining.