writeEncryptedForCaller

Writes ciphertext next to (or into the caller's output path for) the source file, optionally deleting the plaintext source, and returns the file.