If we're passing `salt` as a hex string (unlike the other two Buffer args), should we name the variable `saltHex`? That'd match the formal parameter name down in `derive()`.