A credential the client may answer a challenge with. The mechanism is part of the answer rather
than a detail: the client asks for a password and signs with a key, or calls the authenticator -
and with both kinds on the list it has to offer the choice.
{
"kind": "webAuthn",
"id": "string"
}