u2f-enclave. A FIDO2/CTAP2 authenticator that runs as its own confidential VM (AMD SEV-SNP/Intel SGX)