I thought the working group making the standard was threatening to blacklist any implementation that allows passkeys to be exported for backup, no?