yubikey { id_length = 12 split = yes decrypt = yes validate = no }