pub fn preimage_sha256(phrase: &[u8]) -> Zeroizing<[u8; 32]>
X = SHA-256(phrase). The brainwallet construction; the CLI warns on it at every length (L12) and this function does not judge.