I remember them talking at some point about having dedicated devices used for authentication but only saying that because they moved away from doing it. So I suspect they’re doing something different.