i remember this was possible on thinkpads and linux with a custom pam library like ten years ago.

it was fun to set up, but not really worth maintaining.