Check that the value has changed, is not all-zero and has the right length.
TrezorPayload stores 32 random bytes used for unlocking the master key using a Trezor security module. The randomness makes sure that a unique unlock value is used for each gocryptfs filesystem.
readpassword.Trezor() is not implemented yet and returns a hardcoded dummy key.
Jakob Unterwurzacher