Triggered when a credential is used in a webauthn assertion.
Official doc
(undocumented in the protocol definition)