BREAKING: `HsClientSecretKeysBuilder::ks_hsc_desc_enc()` now takes a `HsClientDescEncKeypair`