[logix]

This pam_usb fork can be used to set up any USB for authentication: https://www.linuxuprising.com/2021/02/how-to-login-with-usb-...

[marianov]

This are PKI tokens, like smartcards. I would like something tied to a certificate and private key on the device. That would be unforgeable