fn make_user_key( rng: impl RngCore, master_key: &MasterKey, ) -> Result<(UserKey, EncString), CryptoError>
Generate a new random user key and encrypt it with the master key.