Function seal 

pub fn seal(
    key: &[u8; 32],
    nonce: &[u8; 12],
    aad: &[u8],
    plaintext: &[u8],
) -> Result<Vec<u8>, Error>

AES-256-GCM seal. Produces ciphertext || 16-byte auth tag.