The PKCS#11 VDM SDK allows the end user to supply custom mechanisms or algorithms.
The resulting VDM code runs inside a sandbox, and there is no access to any external context. It is strictly one operation per call.
Accordingly, the use case is solely custom firmware.