I don’t think it is appropriate as it grants more access than what the interface is meant to. raw-usb is currently what we have for this sort of thing for people to fallback on if we don’t have good mediation elsewhere. What would be a better alternative is for snapd to dynamically detect what devices are yubikey devices and use the hotplug mechanism. In this manner, the interfaces grants the precise USB accesses.