export interface HardwareSecurityProvider { sealKey(plaintextKey: Buffer): Promise; unsealKey(sealedBlob: Buffer): Promise; isHardwareAvailable(): boolean; }