As long as it's local there could be an option for that. I have FreeOTP+ on my phone. Could even use that instead of a PIN to sign keys and revoke stuff 😉