I added a test for the generic case in 69971f7 and I do think there is value in having some handling here because having  `attr_encrypted` clients receive errors from anything other than `attr_encrypted` feels wrong. Perhaps the way forward is to rework this PR to handle `encryptor` specific exceptions and make the necessary changes to `encryptor` to capture these `OpenSSL` exceptions.