pub(crate) fn encrypt_device_token(device_token: &str) -> Result<String>
Encrypts device token with OpenPGP.
The result is base64-encoded and not ASCII armored to avoid dealing with newlines.