Corporate environment rather than educational, so at best we have co-op placements instead of undergraduates.  :P

That said, it's not so much the initial programming of them that scares me as the inevitable replacement of lost keys (which, in fairness, is just the initial programming of a spare) and occasionally having to reprogram one that gets out of sync in weird ways (I actually had a YubiKey's HOTP counter somehow get behind the server's, which should be impossible, but it happened and prevented all future authentications until I reset the server's counter and resynced them).  Put users at enough different sites and things involving physically touching the keys to fix issues get more challenging.