Ok. So it's not google then, it must be AWS or python-aws-google-auth (or my install of it.. which has python-u2flib-host enabled)