pub const TOKEN_OVERHEAD: usize = _; // 48usize
RNS 1.4.2 Identity.TOKEN_OVERHEAD: the 16-byte IV and 32-byte HMAC around every sealed payload.
Identity.TOKEN_OVERHEAD