Open an entry read from the commit-log topic of the conversation whose
keys are keys and whose group id is group_id. Every length is checked
first, then the signature under the conversation’s commit-log id, then
the decryption. The decrypted entry must name group_id and a commit
sequence id greater than 0 and below its envelope sequence id, with a
valid installation signature. A failure discards this envelope only.
Seal a conversation’s entry for its commit-log topic, after the
self-check. The entry’s protobuf encoding is the plaintext, so the same
entry sealed twice gives the same bytes.