Internal
Refuse unsupported keyset versions, including paths that never load keys.
Optional
Takes the id rather than a Keyset so callers holding only a proof can use it. The parse mirrors Keyset.version, which reads the same byte off a loaded keyset.
Keyset
Keyset.version
Refuse unsupported keyset versions, including paths that never load keys.