services.ssh-agent.pkcs11Whitelist

Specify a list of approved path patterns for PKCS#11 and FIDO authenticator middleware libraries. When using the -s or -S options with ssh-add(1), only libraries matching these patterns will be accepted.

See ssh-agent(1).