- Prevent use of AAD for encrypt functions that doesn't support AAD. - Encrypt/decrypt functions should indicate whether they support AAD or not. - Can this be made using path decent types on PlainText? Should it? How else?