Optional
Base64url-encoded auth secret (>= 16 bytes recommended)
Base64url-encoded 65-byte uncompressed P-256 public key
Base64url-encoded auth secret (>= 16 bytes recommended)