identity
Names the key and algorithm in force, so a rotation is loud rather than silent.
Same shape and same purpose as Embedder.identity, and the same rule: stable for the lifetime of the cipher. Never put key material in it. It is written onto nothing today and exists so a deployment can log or assert on which key a process is running.