Note that in addition to normal HPKE we're also adding a Date header to the encrypted headers and padding the contents.