> This raises a more generic question: What's the proper upgrade path for hardware authentication tokens? This is the reason why I'm still using only a passwor

> This raises a more generic question: What's the proper upgrade path for hardware authentication tokens? This is the reason why I'm still using only a password manager. I agree that a hardware token more security but the lost/stolen/change key problem is really not easy right now. I hope there will be a new common API to change all enrollment you have done but it seems hard as the key don't even know them. Maybe in a future version ?