The UI presents all keytypes as a selection when creating a new key, however the TPM or security key may only support a small subset. nCryptAgent should interrogate available keystores and only present the key types that can actually be created.
See also #10 and #11