Doc on key derivation