fn calculate_passcode_hash(passcode: &str, salt: &[u8]) -> Zeroizing<[u8; 32]>
Stretches the verification code, salted by the enrolled device.