Generate one validated local account secret in Rust.
Protect the returned mutable 32-byte value immediately and clear it after passing a copy to open.