Encrypt sensitive text locally in memory using AES-GCM (256-bit). Nothing is ever saved to disk or network.