bc486eb49d
CI / check-and-test (pull_request) Successful in 11s
Write generated configs 0600, treat new keys as raw AES-256, keep PBKDF2 for unprefixed material, and cache derivation at startup.