As PoC'ing has progressed, it's become clear that our API should be simplified:

• Reduce the number of types and combine the encryptor/decryptor
• Hide the key broker
• Merge everything into a single header
• Use a general KMS context instead of a key_decryptor/key_encryptor