have the WeeSodiumChannel constructor derive key
add support for persistent key storage