cbor-smol is otherwise not part of the public API so we should not re-export it: https://github.com/trussed-dev/ctap-types/blob/496fec4e7370a58d132a66b125483871193e69b5/src/lib.rs#L34