it really sucks that webauthn/passkeys decided to go stateful-token instead of the amazing design that was "server-held key pair, encrypted to usb device hardware key" that was the original u2f. this means that yubikey 5s can only hold 25 passkeys. i will hit this limit, i think.