resident
Indicate that the key should be stored on the FIDO authenticator itself. Resident keys may be supported on
FIDO2 tokens and typically require that a PIN be set on the token prior to generation. Resident keys may be
loaded off the token using ssh-add(1).
from ssh-keygen:
from ssh-add: