FIDO2 + automount on user login

[Arbel-arad]

the situation:
i have a system with multiple users, each user's home folder should be encrypted separately.
the root partition is also encrypted with LUKS2 and automatically opened with a TPM.

i would like to decrypt the home directory when a user logs in, by prompting them to use their FIDO2 key.
what would be the best method to achieve this functionality?

(also, is it possible to enroll multiple FIDO keys as a backup instead of storing the plain master key?)