Most security keys ship without a PIN, and websites rarely ask | Hacker News Reader