Add tests for new encryption API on the manager

100% coverage on selectCryptoKey, Encrypt, Decrypt.