Gave demo of Yubikey and requests for best way forward: Slides
[Action: Ian] Agreed that should request a new project to implement lightweight Yubikey support (e.g. just using the yubikey authentication service) for CO trial including getting it working with Cosign.