The HTTP Permissions-Policy header publickey-credentials-create directive controls whether the current document is allowed to use the Web Authentication Api to create new WebAuthn credentials, i.e., via navigator.credentials.create({publicKey})....to use the Web Authentication API to create new WebAuthn credentials...Specification Web Authentication: An API for accessing Public Key Credentials...