passkeys are the obvious answer, but not sure