further investigations: - pcscd.service should NOT be running, it should be started on demand by pcscd.socket. - all attempts to kill the pcscd.service result in an instant restart.