We use CAC cards; I work on a DOD network. They contain everything about you including medical records if the user warrants the service but mainly it contains encryption for email. AD log in still requiring a pin (crackable with about 7 focused years) also contains a fingerprint and other user specific data.