bnotifyd: derive key on startup instead of per-notification.