My company is moving towards 2FA for our desktop logins. It's decentralized, and managed by software and profiles installed on each system. We're being given the option to have either a USB token ...