code: func (handle *ContextHandle) Sign(session mPkcs11.SessionHandle, message []byte) ([]byte, error) {
  	handle.lock.RLock()
  	defer handle.lock.RUnlock()
  
  	return handle.ctx.Sign(session, message)
  }
docs: // Sign signs (encrypts with private key) data in a single part, where the signature
  // is (will be) an appendix to the data, and plaintext cannot be recovered from the signature.