Function decrypt 

pub fn decrypt(enc: &str, key: &[u8; 32], aad: &[u8]) -> Result<String>

Decrypt a SOPS value string under key with aad.

An empty string decrypts to an empty plaintext (matching SOPS isEmpty).