But this behavior is more like a bug at Apple side. I have created the credential provider which is not going to backup the passkeys. Why I should set these flags to 1 in order to force Apple accept my passkeys? Also we want to do attestation, but should set fmt:none.

Sure, FB13709219