pub fn parse_pubkey(b64: &str) -> Result<PublicKey>
Decode a base64-encoded 32-byte X25519 pubkey received over the wire.