Ok, I'm sorry I'm way behind on --current (I'm still running 1.1A-1996.02.03)
so some of this may have been done.

Anyway, I've spent some time hacking a portable login from NetBSD's to
accompany my secure telnet... 

One of the changes I made was to modify getpass() to handle a decent
size buffer so that login can include the s/key challenge in the
normal Passwd prompt and accept either response - passwd or skey via
getpass.  

So login in looks more like:

login: sjg
Password [s/key 643 zen.230101]:
Last login: Fri Sep  6 23:09:45 from zen

The changes are very simple.  If folk think this is a good thing, I
can send-pr it once 1.2 is out.

--sjg