private static SecretKeySpec hmacKeyFrom(byte[] rawKey) {
        return new SecretKeySpec(rawKey, "HmacSHA256");
    }
@return a new HKDF instance initially keyed with the given PRK
security-utils/src/main/java/com/yahoo/security/HKDF.java