Don't accept KDF entropy from the caller
Don't accept KDF entropy from the caller

We can generate that ourselves, which also allows us to get rid of that
annoying Maybe.

ambiata/tinfoil,ambiata/tinfoil