:::endpoint DELETE /v1/me/passkeys/{id}

Gone from this account. The credential stays on the phone that holds it, where
the person can remove it themselves; nothing here can reach into their keychain.

Only passkeys registered through an app can be removed here. The ones on the
firm's own website are managed there.

## Request

```bash
curl -X DELETE https://api.proppertrading.com/v1/me/passkeys/890ad7f8-de78-4b88-b4b2-fc52715671e8 \
  -H "Authorization: Bearer ptat_9f2c1a44_3b8e7d2f5c9a1b4e6d8f0a2c4e6b8d1f"
```

## Response

`204`, with no body.

## Errors

| Status | Code                     | Meaning                                                            |
| ------ | ------------------------ | ------------------------------------------------------------------ |
| 400    | `last_two_factor_method` | It is the only second factor on the account. Add another one first |
| 403    | `insufficient_scope`     | This device does not hold `me:write`                               |
| 404    | `resource_not_found`     | No such passkey under this app's relying party, for this account   |

:::warning An account cannot be left without a second factor
If two-factor is on and this passkey is the last thing answering for it, the
call is refused. Add an authenticator or a second passkey, then remove this one.
:::