pub fn key_fingerprint(public_hex: &str) -> Result<String, String>
SHA-256 of the raw public key, as hex. What the operator compares.