fn split(grant: &Grant) -> Result<(Kept, Vec<String>), SyncError>
A grant as the keyring keeps it: the first entry at most secret::ENTRY_BYTES long, the token’s rest in parts as long.
secret::ENTRY_BYTES