Function decrypt_zeroizing 

pub fn decrypt_zeroizing(
    request: &DecryptRequest<'_>,
) -> Result<Zeroizing<Vec<u8>>, CryptoError>

Decrypts with AES-256-GCM and wipes plaintext when the owner is dropped.