Rename utils.security to utils.crypto, implement xor_strings, cleanups