Function seal 

pub fn seal(
    plaintext: &[u8],
    media_type: &str,
    kek: &[u8; 32],
    kek_id: &str,
) -> Result<Sealed, BlobError>

Seal plaintext, minting a fresh DEK and nonces from the system CSPRNG.