YubiKey still selling old stock with vulnerable firmware