Review AuthenticatedStorage.

[gburtini]

It does not look suspicious, but needs an in depth review considering new knowledge. Perhaps there's a third-party package that would be better. Perhaps we can avoid mcrypt entirely here and use some of the new higher level crypto functionality.