Seal encrypts plaintext with a decrypted data key and returns it in base64.

Unseal decrypts base64-encoded ciphertext with a decrypted data key.