When sapling-crypto is refactored, the zcash_primitives::sapling constant would become the canonical one.