I'd like to be able to use my hardware security key for this purpose (the hardware-linked signature)