Hardware keys should be provided to all employees, because employees will use it for both personal and corporate authentication. It's a true win/win scenario.