[vader1]

Ah, that's perfect. A hardware token as the /only/ factor sounds like a bridge too far anyhow.

[StavrosK]

I don't know, it sounds perfect to me.

[emlun]

It's a hardware token that supports a local PIN as a second factor.