As far as I can work out - Yosemite works fine with smartcards except for one small thing - akin to the issue that hampers OpenSC and SSH use:
http://sourceforge.net/p/opensc/mailman/message/32752270/
If I bin-edit the finish() call out - the VPN comes up fine.
