pub fn client_derive_session_key() -> Result<[u8; 32]>
In test mode, can accept an explicit nonce for testing purposes