Passkey (WebAuthn) authentication. Administrator permission required.
First-time bootstrap requires the setup token (server BOOTSTRAP_TOKEN secret).
BOOTSTRAP_TOKEN