Passkeys can always be rejected.
Although an application can prompt the creation of a Passkey, it's ultimately up to the user to accept its creation. A rejection to do so will throw an 'NotAllowedError' Error, which needs to be escaped to avoid bubbling up the exception.