starting to ask for a pin on an hardware token without checking if the user knows the pin first is truly evil