PRF check

Salt (base64, 32 bytes; leave empty for random):

Credential id (base64, optional, for get):