Fingerprint full credential material for private verification caches.
Full credential material subset.
Secret-bound credential fingerprint.
This digest is one-way and must not be logged because it changes when secret material changes and is used to isolate capability discovery.
Fingerprint full credential material for private verification caches.