Identity Key Custodian
interface IdentityKeyCustodian
An explicitly trusted destination that receives a copy of the private signing key. This is key custody, not portable identity recovery or remote signing.
Functions
Link copied to clipboard
abstract suspend fun importKey(identity: SigningIdentity, privateKey: EncodedKey.Jwk): IdentityCustodyReceipt
Imports the key idempotently under the identity's stable key ID. A different existing key must not be overwritten. Never log the private JWK or include it in an exception.