How about a test that generates two keys in a row, within the same process, and makes sure
they are not identical to each other. If salt is involved, take that into account rather than
doing a bitwise comparison.
That seems like a pretty reasonable test at the library level, to ensure the key really is a
key and not a buffer full of zeros.