Models with no Password

[rwinch]

What to do if no password - need another abstraction that doesn’t require passwords

Right now UserDetails is leveraged for x509 and CAS which also dont' require passwords, but passkeys is yet another place that it is strange to have UserDetails linked to the passkeys.

Perhaps we need a new Security abstraction that does not require a password