Function keyed_digest 

pub fn keyed_digest(
    key: &TraceDigestKey,
    domain: DigestDomain,
    bytes: &[u8],
) -> ComponentDigest

Keyed HMAC-SHA256 component digest with domain separation. The preimage (bytes) is never logged or stored; only the hex MAC output escapes.