// uses empty salt & empty IV, base 64
static S aesEncryptString(S data, S password) ctex {
  ret base64encode(aesEncrypt(toUtf8(data), password));
}