[Zope] Using USB smart token with Apache-enabled Zope web site

I would like to create a collaborative environment where people would work on Blender files (among other file types) with yet unknown parties and enforce 2-way authenticated access to the Zope web site with smart tokens. I want also manage the Zope web site from behind my NAT router. How do I go about this?