[tracking] QSP-7 User might use untrusted authenticators

[tt0mmy]

• add copy to UI when creating an identity via hardware authenticator to use recommended security keys
  cc @fmorency @hansl