Passes cannot be constructed until we know how we're going to use them since
they are derived from the unblinded tokens and an operation-specific message.