standardize on 12-byte IV
persist IV between invocations to prevent accidental reuse
immediately persist to avoid collisions