@navi @l would system-wide not be kernel, or something in user-space using dbus? just throwing ideas at the wall.
it seems like it's not a mystery how to implement this, more that someone hasn't done it already. i love my yubikey and i've seen first-hand how awkward application support has been for the tech on linux.