Don't do passkeys

Webauthn is nice as you can use your existing hardware device (trezor / bitbox etc)