Write consent signature encrypted to Stormpath

Could stormpath client or aes throw? If so, should we propagate the error? Or should we log the exception and fall back to dynamo?