{ config, pkgs, ... }:
{
  pam.yubico.authorizedYubiKeys = {
    ids = [
      "cccccbnfijvi" # Cuba
      "cccccblhtitl" # Bolivia
    ];
    path = ".yubico/authorized_yubikeys";
  };
  # services.yubikey-agent.enable = true; # TODO figure out whether to setup yubikey agent
}