SEC: improve cipher API to allow variable-key ciphers.