pub fn dummy_hash() -> &'static str
A well-formed hash of nothing, verified against when the username is unknown so a miss costs the same KDF time as a wrong password.