https://signal.org/blog/sealed-sender/