How to securely encrypt your secrets with envelope encryption and KMS in Rust