pub fn decrypt_group( master_key_bytes: &[u8], encrypted_group: Group, ) -> Result<Group, ServiceError>