Introduce PaddedCipher, a convenience for this common workflow

This is a very rough draft patch, some notes:

* Doesn't integrate cleanly with the AEAD API (as yet unneeded since our one
  AEAD cipher is a stream cipher)
* Right now everything is private
* Probably needs direct tests (tested indirectly via fernet for now)
* Needs documentation to be a public API of course