"Given the number of times my RSA token code has expired by the time I've finished typing it in and the machine has spent a few round trips getting authenticated..."
Use an SID800 and plug the toekn into your usb port. hey presto all you need to enter is the token PIN the rest is taken care of.
This looks like a good system but what happens for the eventual... what was my pattern?
and obviously the patters drawn on a peice of paper under the keyboard.
I prefer the BOFH based idea, cattle prod attached to every phone, when I get a forgotten password/pin phone call they gt a shock, unfortunately my boss wont allow me implement it.