Touching? What? I did this recently and it's very simple thanks to pass init. I now have two keys, my old one and my new one that is on my yubikey.
I just enter my pin once and it works until I pull it out.
I'd suggest trying 'on' before 'fix', but then switching to 'fix' for the extra security it provides.