My first thought ends with 'enabling yubikey-style mfa', but it seems that some [0] hardware vendors use webusb to enable a binary protocol, rather than translating their usb sensor output into (keyboard) scancodes.

[0] https://en.wikipedia.org/wiki/WebUSB