my own needs, to be honest.  I need to use unique keys for encrypting/signing instead of the `deriveKey` already present in `client-sessions`.  The extra security is worth the minor configuration overhead.