Uses AES-GCM with Argon2id. Output is URL-safe base64.
Time: 3, Memory: 64MB, Parallelism: 1