Yubikey: Issue a new pin if never set, instead of failing

[mariobodemann]

As a user with a fresh Yubikey, i.e. PIN is not configured, we currently throw an exception, but we should setup the PIN instead. (Otherwise we'd need to redirect them to use the YubiAuthenticator to setup their key)