Understanding WebAuthn credential protection policy - Tech Sentiments