Securing Physical Credentials in a Deepfake-Driven World