PKCS#11 Kit Proxy PAM module configuration allowed system authentication via hardware tokens (smart cards, USB keys, and other devices).