There's no way to avoid a finalize call. Are you suggesting the API should be `.encrypt()` and then `.getvalue()` at the end to get the full string? We discussed this, and the conclusion was that buffering should be provided at a higher level.