We should make `PublicKeyCredentialRequestOptions` implement `Serializable`. This will ensure that it an be persisted in distributed `HttpSession` setups.