[drdaeman]

Ah, yes, a well-known example on how to not do it.

They don't support non-biometric authenticators, so one can't use e.g. Yubikey.