Comment by sam_lowry_

They are stored on hardware tokens. There does not seem to be a way to have privately generated software keys, nothing like putty's pageant or .ssh/authorized_keys.

WebAuthn seems to be designed by big businesses to take control of the authentication ecosystem.