The entire passkey situation is pretty telling that the spec was created with just vague promises that export would be handled at a later date.