There's a reason that Apple won't let you enable FIDO keys without having two of them to enroll.