An API which actually does end-to-end key derivation, ECDSA, Schnorr signatures, .... it will probably need a accept a struct with function pointers for generating random bytes, hashing, ... From #26, this needs support for deterministic signing.