Set up Vault
Create the owner's passkey
The passkey stays on this device and opens the collection with Touch ID. There is no password.
This page works from the owner's setup link, made on the server with vault setup-link. The link opens once, for an hour.