pub fn load_cek_hints() -> HashMap<String, [u8; 32]>Expand description
Load persisted CEK hints from cek_hints.json.
Returns an empty map if the file does not exist or cannot be parsed. Called once at daemon startup so files encrypted in previous sessions remain decryptable.