As a layer of security this is great addition. But I would like to see an option to also employ a biometric for identification.
Passwords and keys are great, but their weakness is that they can be shared.
Passwords and keys are great, but their weakness is that they can be shared.
Is a persons biometric signature something that can be legally compelled to be used by a company, if that person quits or go AWOL?
If an employee/agent has ownership of a text keyfile (assuming no company controlled backups exist), the company could look to police/courts about property theft. But biometric seems a bit different.
Biometrics are useful for authentication, but I struggle with a safe use for authorization, per se. Just for the reason you identified.