Function derive_key 

pub fn derive_key(api_key: &str) -> [u8; 32]

Derive the per-account bundle key from the API key. The server only ever stores sha256(api_key), so this key is unknowable server-side.