mirror of
https://github.com/GSA/notifications-api.git
synced 2026-05-23 02:01:43 -04:00
It's not a big deal if a user is no longer eligible to register a security key, so we may as well let them continue using it. This avoids putting them in a limbo state if we don't immediately change their auth type when they're no longer eligible to use the feature.