@RuiSeabra nice! That is really helpful. Is it compatible with arbitrary u2f/fido keys? In that case I might mention it in the next article on pam_u2f :)