fn expand_secret( secret: &OkmBlock, hkdf: &'static dyn Hkdf, aead_key_len: usize, ) -> (AeadKey, Iv)