enables a roaming, user-controlled cryptographic authenticator to interoperate with a client platform