Yubikey support, WebAuthN

Please add support for WebAuthN, for example Yubikey.

SMS for 2-factor is pretty insecure:

OTP (one time password) is good, but supporting security keys would be a good addition.