These functions have very very similar code for computing `hs_desc_build_authorized_client()` and `decrypt_descriptor_cookie()` for computing the keys for the client authorization. We should refactor this and consolidate since they do the same work on both sides (client and service).