We should make PublicKeyCredentialCreationOptions implement Serializable. This will ensure that it an be persisted in distributed HttpSession setups.