fn aes_gcm_seal( key: &KeyInner, nonce: Nonce, aad: Aad<&[u8]>, in_out: &mut [u8], cpu_features: Features, ) -> Result<Tag, Unspecified>