Passkeys are not a trap - security considerations for web developers