pub fn token_seal( key: &TokenKey<'_>, iv: &[u8; 16], plaintext: &[u8], out: &mut [u8], ) -> Result<usize, BufferTooShort>