https://www.w3.org/TR/webauthn/ https://www.imperialviolet.org/2017/08/13/securitykeys.html
Stuff oauth - go u2f