add KDF unit test, include masterKey in return value
add encrypt/decrypt, with tests