YubiKey missing some functionality
A YubiKey, no matter whether whitelisted or allowed on demand, can respond to e.g. challenge response requests, but the smartcard functionality e.g. for TOTP does not work.
May be somewhat related to https://github.com/USBGuard/usbguard/issues/299