Thrown during register() when no usable session secret could be resolved,
or when the resolved secret is too short.
This is deliberately a startup failure rather than a per-request one: a misconfigured secret makes every session unreadable, and discovering that on the first login is worse than discovering it on boot.
readonly
name: string
Discriminant for consumers that cannot use instanceof across realms.