I can configure and deploy "enterprise wide" public key infrastructure (TLS certificates) with client certificates backed by smartcards embedded in employee bad

I can configure and deploy "enterprise wide" public key infrastructure (TLS certificates) with client certificates backed by smartcards embedded in employee badges. So there's that.