`oks` knows about these auth methods, being able to `yhsm reset` w/ an ISO or physical CD would be a quality of life improvement