I just switched to clavid. As @elektronaut pointed out they do support delegation, and their two-factor authentication supports a big list of OTP standards (so it's compatible with the Google Authenticator): http://www.clavid.com/index.php?option=com_content&task=view...