45f6580be4
We also correctly ask for a PIN touch after the key is generated (which does not need it) but before certificate generation (which does if the touch policy is not "none"). Closes str4d/age-plugin-yubikey#101.