pub(super) fn encrypt( key: &[u8], plaintext: &[u8], iv: &[u8], aad: &[u8], ) -> Result<Vec<u8>, OnePasswordError>
AES-256-GCM encrypt, returning ciphertext || tag.
ciphertext || tag