add module for deriving hawk credentials

Fixes #27.