pub fn encrypt_string( plaintext: &str, key: &[u8], aad: Option<&[u8]>, ) -> Result<Vec<u8>>
Encrypt a UTF-8 string using AES-256-GCM.