ANDROID: make PF_KEY SHA256 use RFC-compliant truncation.