Comment by mihaigalos

Sidenote: This requires internet access. I'm considering selfhosting a Yubikey auth server and disabling ssh on it.