Physical keys are being used as an alternative to the vulnerable safewords-and-characters approach. The real game-changer, though, is virtual passkeys. See why.