peg the version of cipher that we use

TBR - peg the version of cipher that we use. The latest version (0.5.0) has a dependency on `dart:io`.