pub const fn sealed_len(plaintext_len: usize) -> usize
PKCS#7 always pads (1..=BLOCK_LEN bytes), so a sealed token strictly outgrows its plaintext.
BLOCK_LEN