add u2f support

sys/platforms/posixlycorrect/yubikey.nix

@@ -18,15 +18,17 @@
     enableSSHSupport = true;
   };
 
-  security.pam.services = {
+  security.pam = {
-    login.u2fAuth = true;
+    services = {
-    sudo.u2fAuth = true;
+      login.u2fAuth = true;
-  };
+      sudo.u2fAuth = true;
+    };
 
-  security.pam.yubico = {
+    u2f = {
-    enable = true;
+      enable = true;
-    debug = false;
+      debug = true;
-    mode = "challenge-response";
+      cue = true;
-    id = ["27677315"];
+      control = "sufficient";
+    };
   };
 }