ENV{ID_SECURITY_TOKEN}==1
to a single equals:
ENV{ID_SECURITY_TOKEN}=1
and re-ran
sudo /rw/config/rc.local
Pulling the Yubikey now locks the screen. Should I submit it as a bug? Or just a documentation pull request to update the command?