fn try_decrypt_with_bobstate( esk: &SymKeyEncryptedSessionKey, conn: &mut Connection, ) -> Result<Option<(PlainSessionKey, String)>>