- Check if a credential matching an item of excludeCredentialDescriptorList is present on this authenticator. If so, return an error code equivalent to "NotAllowedError" and terminate the operation.
This should explicitly mention that the the item must be checked to match the provided RP ID.
See PR #651