More work on scrubbing...

Be yet more careful about scrubbing. Provide some precaution that we're not encrypting with a scrubbed key.
Maybe we should go further and change the callback mechanics of encryption to take an err, rather than
throwing an error.  Add more commentary.