That was about getting a custom.LockScreen script persitent. I’m wondering why sys-usb is the preferred VM to install and use the tools in.
I’m planning to use Hypersec HyperFIDO for unlocking a KeePassXC-database in a vaultVM. U2F (or OTP) for webapps and Challenge-Response for screen locking might be nice to have, too, but is secondary at the moment.