basically a hardwired authenticator dongle that the user cannot touch