In your YubiKey SSH client you use the PIV applet with a maximum of RSA2048 when you could’ve used the auth key on the GPG applet for RSA4096. Is NIST compliance something you want to advertise today?