High-level authenticated encryption API used by Vault