pub fn decode_identity(payload: &[u8]) -> Option<([u8; 32], [u8; 32])>
Split a persisted identity payload into (secret, public); anything but the exact expected length is treated as no identity.