NEXUS-6323: Implement plexus-cipher drop-in replacement

Also supporting legacy and current implementations, as
seemingly legacy is still used somewhere in NX.