In the context of two-factor authentication (2FA), I’ve heard about attestation objects being used for non-repudiation. What exactly is a 2FA attestation object, and how does it help in providing non-repudiation? Is this commonly used, and are there specific technologies or standards that define its implementation?