Core could benefit from `DecryptedSecureString` (e.g. `ScramSha1Authenticator` and `ScramSha256Authenticator`). However, sharing the `DecryptedSecureString` class among High, Core, and the test projects is non-trivial if we do not wish to expose `DecryptedSecureString` as part of the public API.