clarify possible IV reuse with multiple Encrypt handles