using challenge response see https://developers.yubico.com/yubico-pam/Authentication_Using_Challenge-Response.html