What's stopping a non-complying browser from sending forged attestation tokens? Honest question.