[Feat] 1st class support for envelope encryption for KMS storage of key(s)

[nuke-web3]

Motivation & basics on impl: https://kerkour.com/rust-secrets-kms-envelope-encryption

Mainly want a way to safely store the symmetric encryption key used in ChaCha, perhaps more.