WebAuthn credential create in a cross-origin iframe

Without policy:

With publickey-credentials-create policy:

With payment policy: