Most security keys ship without a PIN, and websites rarely ask | Dark Hacker News