I’ve been playing with OTP - one time passwords. I am not quite sure, if I’ll ever use them on a production box, though. A good starting point is the article “one-time passwords” on onlamp.com.
I got it too work rather quickly and even got some basic understanding on how pam works.