Currently the only part that can fail is the U2F registration
decoding. As a side effect of validating user objects early, it also
gets rid of runtime allocations by just storing a map of backend.User
objects.