BI think the technical details of why/how/what regarding all this stuff can be a distinct thread ... one i'm interested in but I don't want to derail a more general discussion 
AThe enroll part needs to be in yafti or just
AOr something
AMaybe some script that generates the crypttab
Bi'm currently using fido unlock on my laptop wiht a yubikey and i don't have the pam /u2f packages installed
Bso that's part of the reason this is interesting, exploring what the goals are for something like this, and what's actually required
Bwhat I DO have is flatpak (or maybe appimage) yubikey manager tools
EI wanted to create a general justfile for security related implementations in config with recipes that better automate setup of things like yubikeys tools, login/sshd/sudo/etc via FIDO, to provide something that's more approachable for users versus the current situation we have which is a bunch of skewed documentation
