Wrap PKCS1 module with DEPRECATED_REMOVED
diff --git a/include/mbedtls/pkcs11.h b/include/mbedtls/pkcs11.h
index 2247bf7..56543e4 100644
--- a/include/mbedtls/pkcs11.h
+++ b/include/mbedtls/pkcs11.h
@@ -47,6 +47,8 @@
 extern "C" {
 #endif
 
+#if defined(MBEDTLS_DEPRECATED_REMOVED)
+
 /**
  * Context for PKCS #11 private keys.
  */
@@ -56,12 +58,6 @@
         int len;
 } mbedtls_pkcs11_context;
 
-/*
- * NOTE: It is not necessary to enclose the definitions with
- * MBEDTLS_DEPRECATED_REMOVED because we already have a check for the full
- * MBEDTLS_PKCS11_C feature that makes compilation fail even before we get
- * here.
- */
 #if defined(MBEDTLS_DEPRECATED_WARNING)
 #define MBEDTLS_DEPRECATED      __attribute__((deprecated))
 #else
@@ -205,6 +201,8 @@
 
 #undef MBEDTLS_DEPRECATED
 
+#endif /* MBEDTLS_DEPRECATED_REMOVED */
+
 #ifdef __cplusplus
 }
 #endif