pub fn mint_pending_identity() -> Result<UserKeypair, KeyError>Expand description
Mint a fresh identity for a device-pairing attempt that has not joined a
store yet. The joiner signs its pairing request with this keypair and holds it
under a pending slot keyed by its own public key. The join establishes it
in the joined store’s own identity custody (via
DeviceIdentityCustody::establish,
before the store’s completion marker) and discards the pending slot only
once the whole join succeeds; discard_pending_identity also removes it
if the pairing is abandoned instead. Always the OS keyring: unlike an
established store’s identity, there is no store yet to select a custody
policy for, and a pending identity’s lifetime is short (a join round trip,
not a store’s lifetime).