I like this. Can you add yubikey as another factor? Where I work we never need this though, we have a jwt server that can serve a time limited token for work a

I like this. Can you add yubikey as another factor? Where I work we never need this though, we have a jwt server that can serve a time limited token for work account that various systems can accept.