Passkeys are signing a challenge using a captive secret, right? The relying party doesn't get the secret.