How to Switch an Existing User's Authenticator to Use a Yubikey