Document why there are no high-level AEAD and pwhash APIs yet