pub fn credential_identity(secret: Option<&str>) -> String
The digest of a credential’s identity: never the credential.