Still need to check `this.encryptionSecret.length >= 16` (for AES with 128-bit keys, or 32 for 256)