initcpio hook to do 2FA for LUKS with a yubikey