Comment by computerfriend

Now you can drop the PIV or PGP dependencies. OpenSSH can use webauthn to derive SSH keys.