diff --git a/README.md b/README.md
index fe5538e..aee4de3 100644
--- a/README.md
+++ b/README.md
@@ -85,14 +85,15 @@ If you have a Mac, I'd love to add support for `launchd` socket activation. See
 
 #### gpg-agent
 
-|              | Security Key | Keyfile |
-| ---          | ---          | ---     |
-| ECDSA Sign   | ✅           | ✅      |
-| ECDH Encrypt | ⏳           | ❌      |
-| ECDH Decrypt | ⏳           | ❌      |
-| RSA Sign     | ❌           | ✅      |
-| RSA Encrypt  | ❌           | ❌      |
-| RSA Decrypt  | ❌           | ✅      |
+|                         | Security Key | Keyfile |
+| ---                     | ---          | ---     |
+| ECDSA Sign (NIST P-256) | ✅           | ✅      |
+| EDDSA Sign (Curve25519) | ⏳           | ⏳      |
+| ECDH Encrypt            | ⏳           | ❌      |
+| ECDH Decrypt            | ⏳           | ❌      |
+| RSA Sign                | ❌           | ✅      |
+| RSA Encrypt             | ❌           | ❌      |
+| RSA Decrypt             | ❌           | ✅      |
 
 ## Install
 
@@ -100,8 +101,8 @@ If you have a Mac, I'd love to add support for `launchd` socket activation. See
 
 #### Consider redundancy
 
-It is important to understand that if you lose access to your security key there is no way to regain the keys stored on it.
-For that reason it is highly recommended that you use fallback keyfiles with `piv-agent`.
+If you lose access to your security key (lost, stolen, broken) **there is no way to recover the keys stored on it**.
+For that reason it is highly recommended that you use multiple security keys and/or fallback keyfiles.
 
 #### Install pcsclite
 
diff --git a/internal/mock/mock_pivservice.go b/internal/mock/mock_pivservice.go
index f3cba20..18d182e 100644
--- a/internal/mock/mock_pivservice.go
+++ b/internal/mock/mock_pivservice.go
@@ -108,20 +108,6 @@ func (mr *MockSecurityKeyMockRecorder) PrivateKey(arg0 interface{}) *gomock.Call
 	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "PrivateKey", reflect.TypeOf((*MockSecurityKey)(nil).PrivateKey), arg0)
 }
 
-// Serial mocks base method.
-func (m *MockSecurityKey) Serial() uint32 {
-	m.ctrl.T.Helper()
-	ret := m.ctrl.Call(m, "Serial")
-	ret0, _ := ret[0].(uint32)
-	return ret0
-}
-
-// Serial indicates an expected call of Serial.
-func (mr *MockSecurityKeyMockRecorder) Serial() *gomock.Call {
-	mr.mock.ctrl.T.Helper()
-	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "Serial", reflect.TypeOf((*MockSecurityKey)(nil).Serial))
-}
-
 // SigningKeys mocks base method.
 func (m *MockSecurityKey) SigningKeys() []securitykey.SigningKey {
 	m.ctrl.T.Helper()