pub async fn hkdf(vault: &'_ mut impl Hasher + SecretVault)