pub fn maybe_decrypt( value: Option<&str>, encrypt: bool, secret: &str, ) -> Result<Option<String>, AuthError>
Conditionally decrypt a token with a single persistence key.