PIV Cards shall implement PIN-based cardholder activation to allow privileged operations using PIV credentials held by the card