crypt: add encryption/verification doctests using the new subkey.