pub(crate) fn derive_symmetric_key(
    password: impl AsRef<[u8]>,
    salt: [u8; 16]
) -> Zeroizing<[u8; 32]>