Start a stream with Rust-generated key material and nonce.
Create a fresh attachment encryption stream with random key material.