An opaque identifier for a local key. Currently only contains a unique ID, but it can be
extended to contain scope information to allow cleanup on scope exit.
Represents a key identifier that can be used to identify cryptographic keys in the
key store. It is used to avoid exposing the key material directly in the public API.