pub const MAX_SECRETS_KEY_FILE_BYTES: u64 = 4_096;
Default cap for primary-key files (hex is 64 chars; allow whitespace/BOM).