fn calculate_identity(username: &str, key_uuid: &str) -> String
SHA256(SHA256(uuid) || SHA256(lower(nfkd(username)))), url-safe base64.
SHA256(SHA256(uuid) || SHA256(lower(nfkd(username))))