This may be the issue as I'm using SunSSH:

Due to fork safety issues the application must re-login if the child continues to use the PKCS#11 engine.

Whether or not I'm affected by this, my issue does go away if I reconnect in the child prior to running the command.

Problem solved (for now).