• OpenSSH and smart cards / PKCS#11
• Best solution since v5.4p1
• Interim "stable" X509/PKCS#11 solution
• Oldest solution (deprecated)