Function decrypt_token_with_config 

pub fn decrypt_token_with_config(
    stored: &str,
    secret: &AuthConfig,
) -> Result<String, AuthError>

Decrypt current-format ciphertext; reject plaintext and obsolete formats.