Some users are forced to use these instead of passwords (whether because they use 2-factor auth or by policy). Document it so they know how. Change-Id: I558c2e8d3e8b0fad0a96a361232f14443e82a35f