The reference implementation (IronOxide) and `ironweb` have supported unmanaged encryption for a long time, add support here.