Maybe replace disabled proprietary WebAuthn funcitonality with GPL3 hwsecurity library
WebAuthn and hwsecurity libs add support for USB hardware security tokens (yubikeys etc)
First mentioned here: #26614 (comment 2799045)
Library repo: https://github.com/cotechde/hwsecurity