Yes, the promoted number of RKs by fido2-token is incorrect. This issue targets this topic and also defines restrictions for now. Technically far more are possible (especially secrets entries), we keep the numbers not too high for now as there are some performance issues once there are too many entries.