WIP: actually use bouncycastle

* now aem-gcm works
* but need to switch to AES-Engine for improved error handling
* will refactor encryption/decryption -> currently there are som
  unhandled exceptions