Yubikey without sys-USB

If you have 2 USB controllers and 1 of them is in dom0 then you should’ve 1 more left to use for sys-usb, no?
Do you want to use yubikey connected to dom0 in other AppVMs?
Also, you can create sys-audio and use it as sys-usb as well: