@@ -78,6 +78,7 @@ pub_underscore_fields = "allow"
 redundant_pub_crate = "allow" 
 uninhabited_references = "allow" # safe with unsafe_code = "forbid" and standard uninhabited pattern (match *self {})
 too-many-lines = "allow" # this is a very common pattern in server code, and it's not always possible to break it down into smaller modules without hurting readability
+unused_async_trait_impl = "allow" # to pedantic

@@ -90,0 +116,4 @@
+            });
+        }
+
+        let registered = diesel::select(diesel::dsl::exists(

@@ -90,0 +123,4 @@
+        .await?;
+
+        let token = if registered {
+            match tokio::fs::read_to_string(&path).await {

@@ -90,1 +145,4 @@
+        })
+    }
+
     fn is_correct_token(&mut self, token: &[u8]) -> bool {

@@ -0,0 +40,4 @@
+    total: usize,
+    key: &mut KeyCell,
+    rng: impl CryptoRng,
+) -> Result<SafeCell<Vec<Vec<u8>>>, ShamirError> {

@@ -0,0 +41,4 @@
+    key: &mut KeyCell,
+    rng: impl CryptoRng,
+) -> Result<SafeCell<Vec<Vec<u8>>>, ShamirError> {
+    if total == 0 || threshold == 0 || threshold > total || total == 2 || total > MAX_COMMITTEE_SIZE

@@ -0,0 +54,4 @@
+            .try_into()
+            .map_err(|_| ShamirError::Split("unexpected seal key length".to_owned()))?;
+
+        if threshold == 1 {

@@ -0,0 +86,4 @@
+    }
+
+    let combined = shares.read_inline(|shares| {
+        if threshold == 1 {

@@ -0,0 +134,4 @@
+        let mut key = KeyCell::from(expected);
+        let rng = UnwrapErr(SysRng);
+        let mut shares = split_key(2, 3, &mut key, rng).expect("split should succeed");
+        for indexes in [[0_usize, 1_usize], [0, 2], [1, 2]] {

@@ -0,0 +1,162 @@
+//! Storage for Shamir custody material: the reconstruction threshold and the