Hardware-backed authentication