We currently do not support the PRF extension or the necessary CTAP extension for it, hmac-secret. This bug is to implement both of those.
<rdar://problem/113572812>
explainer: https://github.com/w3c/webauthn/wiki/Explainer:-PRF-extension