pub fn set_key_base(secret: impl Into<Vec<u8>>) -> Result<(), Vec<u8>>
Install the app’s secret key base. Idempotent: a second call is rejected and returns the passed-in secret back. Call once at boot before serving.