With Linux I think you do have the option of encrypting with your own cert using the PCKS#11 module on the Yubikey.
That's interesting, thank you, I will definitely look into this.