rs256_pk_verify_sig
ok = rs256_pk_verify_sig(&dgst, pk, &stmt->sig);
ok = rs256_pk_verify_sig(&dgst, &cred->attcred.pubkey.rs256,
int rs256_pk_verify_sig(const fido_blob_t *, const rs256_pk_t *,