PIV: unify handling of dynamic authentication template

Note that SP800-73-4 is now clear on using tag 0x80 as encrypted
challenge in mutual authentication, so we don't need to fall back to
looking at 0x82 anymore.