Key context for the operation. Must be the root 32-byte index KEK. A bare 32-byte index key implicitly converts to a KeyContext.
DeleteIndex requires the root index KEK. A per-user KeyContext (one built with a user_kek and user_id) is rejected — RBAC users cannot delete the index.