Any thoughts on whether kbdint should be directly embedded in the userauth document? How about just a reference to it, perhaps at the end of the password auth discussion? /fc