Encrypts against each of a user's keys and silently fails on decrypts so message can be used normally