#12 Avoid buffering plaintext when reading from `SecretStream`.

`SecretStream` currently buffers decrypted data before copying it into the caller supplied buffer in the `read` method. We should be able to eliminate this and decrypt directly into the caller supplied buffer.