don’t expose instantiate, use base64 url safe encoding for salt