With Yubikeys there's also the option of using the GPG smart card functionality for SSH keys. It's quite a bit of a hassle client-side, but it's completely tran

With Yubikeys there's also the option of using the GPG smart card functionality for SSH keys. It's quite a bit of a hassle client-side, but it's completely transparent to the server.