Function token_digest 

pub fn token_digest(token: &str) -> String

Random high-entropy tokens (sessions, api keys) are stored as a plain digest, a KDF buys nothing against a 256-bit preimage and the deterministic value makes the unique index a real lookup.