pub fn decrypt_for_thread( thread_key: &str, nonce: &str, ciphertext: &str, ) -> Result<Vec<u8>, CryptoError>