Add transparent encryption mold and automatic IV generation

Also decrypt nested secret forms when decrypting a collection form.
Pass through secret forms that fail to decrypt.