Good point; a physical key is just as good as a password and has the benefit that people will treat it properly.