pub fn decrypt_token(stored: &str, secret: &str) -> Result<String, AuthError>
Decrypt current-format ciphertext with a single persistence key.
Use decrypt_token_with_config to read managed key versions.
decrypt_token_with_config