Better sanity checking of yubicode; Logging of all bad auth attempts; Checking return value of system() call so that abnormal exits to that call itself (not just the retval of yubiauth) qualify as a failure, as they should.