Sign in with your passkey. The private key stays on this device.
First device, or adding a new one. Needs the enrolment token.