Script and instruction at https://james.toebesacademy.com/USBKey.html
ssh-keygen
udev
bash
Compromise was unlock, then lock if key check fails.