pub(super) fn derive_pin_user_key( client: &Client, encrypted_pin: EncString, ) -> Result<EncString, CryptoClientError>