The AuthGravity approach to authentication and authorization seems to prioritize security and privacy, using WebAuthn and zero-knowledge proofs. I'm intrigued by the use of hosted passkey surfaces and the option to build custom UI with the @authgravity/browser library. However, I'd like to see more discussion on the trade-offs between security and usability, particularly for users without passkey support. How do you envision the account key fallback and recovery mechanisms being used in practice?