@54ac4ca4 enroll some other unlock mechanism, such as recovery key, password, fido2, pkcs11, ... support for that is all there.