Pluggable Authentication Module (PAM) for U2F and FIDO2