“I Left my Token Home”
Local management can cope with this better than a central PKI can.
New token (or certificate) can be issued quickly.
- But must update authorization information as well.
Revocation is an issue for any public-key technology; quick access to authorization tables can help.