pub fn encrypt(key: &[u8; 32], plaintext: &[u8]) -> Result<String>
Encrypts plaintext with AES-256-GCM. Returns nonce || ciphertext as hex.
nonce || ciphertext