Description
PKCS#11 tokens can be used for local PAM authentication from this development build. Administrators install it when smart cards or USB crypto tokens should verify user access.
Token authentication depends on device custody, certificate trust, and fallback policy. Test enrollment and recovery before requiring it.