Once upon a time, I was on a dev team which had to share an RSA 2FA token for accessing a client's VPN. Rather than pass it around to whoever needed it, we just pointed a webcam at it.