title: is it possible to setup Yubikey to require PIN after reboot or power loss?
body: <p>I have Yubikey 5 Nano (the USB-A variant) and use it exclusively for storing SSH keys - the non-resident variant - via the FIDO2 protocol. I used the <code>ykman</code> tool to set the user PIN and the <code>gpg</code> to set the admin PIN. Is it possible to set up the Yubikey so that it requires the user PIN before/at the first FIDO2 interaction after reboot or power off but not the subsequent interactions ? It would still require touch. This is on Linux however I have macOS in mind as well, both using OpenSSH.</p>
  <p>The rationale is that if I lose the Yubikey, I'd like to prevent someone from grabbing the public key from somewhere and using these to get access.</p>