Add HKDF with SHA256 as a key derivation option when using a master key instead of a passphrase.