Rutoken ECP cards have no default SE file. Previous cards ignored MSE with restoring default SE, but new cards don't. This requires SC_SEC_ENV_FILE_REF_PRESENT to be removed from env flags.