To attest or not to attest, this is the question – Provable attestation in FIDO2