PRF output for the first requested salt, when the authenticator evaluated PRF during registration (PRF-on-create). Null when not requested or unsupported — caller then derives via a GET ceremony.