Ideally, I'd love to support both U2F/Fido and passkeys but that means we need to have proper TLS set up. Given this is meant to be run locally, and then deployed with your own TLS setup, we have a few options here, namely:

1: I write the scaffolding for you to drop your TLS stuff in and it works
2: I write the scaffolding, but leave it as a run-time flag configuration setting, such as use-encryption = 'True'

Open to thoughts from all