> It's not clear to me that this so called PIN has exactly the > same purpose as what stoken or openconnect call a PIN Right. Well, it's kind of the same *purpose* -- it's to prevent the token from being used in your absence by someone who has access to it. But it's certainly a different thing. Perhaps we want a --token-prefix argument for OpenConnect? -- dwmw2
