Possible nit: does it make sense to have the opaque-keys.testing entry point everywhere, or should this be moved into a tests directory?