We should also process WebAuthn extensions. These are defined as client extensions, so they should fit right in - we can possibly prefix these with WebAuthn (eg. WebAuthnPRFExtension for my favourite extension, Pseudo-random function extension (prf).
Originally posted by @AlfioEmanueleFresta in #77 (comment)