pub async fn hkdf(vault: &mut impl Hasher + SecretVault)