I think there should be several layers ofauth.

Voice

Thumb prints

Password (to see how you type it)

^

have your hard token verify the above

#[0]