class ActiveSupport::MessageEncryptor

avoid padding attacks. Reference: https://www.limited-entropy.com/padding-oracle-attacks/.
Decrypt and verify a message. We need to verify the message in order to

def decrypt_and_verify(data, purpose: nil, **)
  _decrypt(verifier.verify(data), purpose)
end