fn encrypt_with( key: &[u8; 32], plaintext: &str, ) -> Result<String, CredentialError>
Encrypt plaintext with key, prepending a fresh random nonce.
plaintext
key
TRACES: UR-012 | IR-014 | UT-014