[asdkjlfkasjdf]

for sudo and libpam like they are doing in that post, a fingerprint reader is even better. same HSM, but one extra layer of security.