We should have had this 20 years ago. It is almost pathological how difficult it is to reliably use hardware keys as ssh credentials.