This is awesome. I've played with something similar and have been thinking about automating some of this process to give small startups a really lightweight way

This is awesome. I've played with something similar and have been thinking about automating some of this process to give small startups a really lightweight way to on-board this kind of capability for physical + PIN multi-factor SSH access.