Add encryption-at-rest

[timofey-barmin]

Pass encrypt and decrypt callbacks via app env, and use them every time data is written or read.

Pass decrypt callback to chronicle_dump, so it can decrypt data.