Fair enough, but that still doesn't obviate the cost and competence concerns. Knowing the state of fed IT, it would probably wind up being a 5-year-old RSA dong

Fair enough, but that still doesn't obviate the cost and competence concerns. Knowing the state of fed IT, it would probably wind up being a 5-year-old RSA dongle variant that uses RC4 or some such.