Comment by fragmede

Could link it to a yubikey via pam.d so you need a fingerpress to authenticate.