pub fn key_id(pk: &[u8; 32]) -> String
"ed25519:" plus 16 hex chars of sha256(public key): the grant key id the operator compares at init time.
"ed25519:"
sha256(public key)
init