Yubikey-manager

** Add --reader flag to ykman list, to list available smart card readers
** FIPS: Checking if a YubiKey FIPS is in FIPS mode is now opt-in, with the --check-fips flag
** PIV: Add commands for writing and reading arbitrary PIV objects
** PIV: Verify that the PIN must be between 6 - 8 characters long
** PIV: In import-certificate, make the verification that the certificate and private key matches opt-in, with the --verify flag
** PIV: The piv info command now shows the serial number of the certificates
** PIV: The piv info command now shows the full Distinguished Name (DN) of the certificate subject and issuer, if possible
** PIV: Malformed certificates are now handled better
** OpenPGP: The openpgp touch command now shows current touch policies
** The ykman usb/nfc config command now accepts openpgp as well as opgp as an argument
** Bugfix: Fix support for german (DE) keyboard layout for static passwords

** Add support for Security Key NFC
** Add experimental support for external smart card reader. See --reader flag
** Add a minimal manpage
** Add examples in help texts
** PIV: update CHUID when importing a certificate
** PIV: Optionally validate that private key and certificate match when importing a certificate (on by default in CLI)
** PIV: Improve support for importing certificate chains and .PEM files with comments
** Breaking API changes:
*** Merge CCID status word constants into a single SW enum in ykman.driver_ccid
*** Throw custom exception types instead of raw APDUErrors from many methods of PivController
*** Write CLI prompts to standard error instead of standard output
*** Replace function `ykman.util.parse_certificate` with `parse_certificates` which returns a list

** Support for YubiKey 5A
** OATH: Ignore extra parameters in URI parsing
** Bugfix: Never say that NFC is supported for YubiKeys without NFC

** Add support for YubiKey 5 Series
** Config: Add flag to generate a random configuration lock
** OATH: Give a proper error message when a touch credential times out
** NDEF: Allow setting the NDEF prefix from the CLI
** FIDO: Block reset when multiple YubiKeys are connected

** Support for YubiKey FIPS.
** OTP: Allow setting and removing access codes on the slots.
** Interfaces: set-lock-code now only accepts hexadecimal inputs.
** Bugfix: Don't fail to open the YubiKey when the serial is not visible.

** Support for YubiKey Preview.
** Add command to configure enabled applications over USB and NFC. See ykman config -h.
** Add command for selecting which slot to use for NDEF. See ykman otp ndef -h.