Our story is that we use Duo for MFA logins for our users. Of the options available we support either a Push notification to the app or a press of a Yubikey in the PC. The user chooses at login (RDP, other compatible apps). It'd be nice to have in PasswordState as well - if Duo is configured to fail when internet is out, the backup is yubikey. I think it's worth having a failover method being your password manager is probably one of the most critical services to have up. Additionally, users could keep the choice of remaining "off the grid" if they didn't want to install any software related to
