access: values sealed for their readers

cs1.<age file>: a value encrypted with age to its readers' SSH keys,
which no node decrypts. _continuum/access/sealed declares paths whose
values must be sealed, for named readers or anyone; nodes check the
recipients by age's key tags, at the API and on receipt.

Auth plan M8, reworked: sealed values instead of containers, readers
as users only (nodes hold no keys).

1 files changed, 1 insertions, 1 deletions

diff --git a/src/access/sshsig.rs b/src/access/sshsig.rs
index b40da0d..6091528 100644
--- a/src/access/sshsig.rs
+++ b/src/access/sshsig.rs
@@ -53,7 +53,7 @@ impl PublicKey {
         Ok(PublicKey(key))
     }
 
-    fn blob(&self) -> Vec<u8> {
+    pub(crate) fn blob(&self) -> Vec<u8> {
         let mut blob = Vec::new();
         string(&mut blob, KEY_TYPE.as_bytes());
         string(&mut blob, &self.0);