AuthenticatedDevice

Proof that a request for endpoint on behalf of address passed authentication and claimed its nonce. Only DeviceAuthenticator creates one, so a protected operation cannot run without it. registrationState is the registration whose key verified the request: an operation that must still hold when it commits (a recovery key rotation or revocation) compares against it.