Function generate_key 

pub fn generate_key() -> String

256 bits of OS entropy, base64url-nopad, mmk_-prefixed. mmk_ makes minted keys recognizable to secret scanners; it is cosmetic to validation, since hash_key covers the whole string rather than parsing the prefix.