Add encrypted SecretForm to ProtoVariant

Variant encryption depends on bouncycastle. AnyForm.{ encrypt, decrypt }
degenerate to identity operations when bouncycastle can't be found,
keeping Basis hard-dependency-free.