same as `setupCredentials`... you can just `return keyStretch.derive(...` instead of `p.resolve(token)` do `return token`