Comment # 3 on bug 1234448 from Fabian Vogt

(In reply to Alberto Planas Dominguez from comment #2)
> Interesting, no. Fails in my system:
> 
> "g-exec-error-quark: Could not redirect Yubico YubiKey OTP+FIDO+CCID
> [1050:0407] at 1-68: Failed to execute child process
> "/usr/bin/spice-client-glib-usb-acl-helper" (Permission denied) (3)"

Right, that's unrelated and means your user is not member of the "kvm" group.
You could also do

sudo setfacl -m u:$USER:rwx /usr/bin/spice-client-glib-usb-acl-helper

temporarily.