Authentication for users at signon is managed by login.conf(5), where you could provision the authentication system you desire for root, including devising your programs that check for a USB key, mother's maiden name, or the phase of the moon.
Physical access to the platform means physical access. Any ninjas that enter your facility can bring their own keyboard and do whatever they want, without your USB key or the root password.
