fn try_decrypt_with_broadcast_secret( esk: &SymKeyEncryptedSessionKey, conn: &mut Connection, ) -> Result<Option<(PlainSessionKey, Option<String>)>>