docs: private static ContentCryptoMaterial doCreate(SecretKey cek, byte[] iv,
                                                    EncryptionMaterials kekMaterials,
                                                    ContentCryptoScheme contentCryptoScheme,
                                                    S3CryptoScheme targetS3CryptoScheme,
                                                    CryptoConfiguration config,
                                                    AWSKMS kms,
                                                    AmazonWebServiceRequest req) {
          // Secure the envelope symmetric key either by encryption, key wrapping
          // or KMS.
          SecuredCEK cekSecured = secureCEK(cek, kekMaterials,
                                            targetS3CryptoScheme.getKeyWrapScheme(),
                                            config, kms, req);
          return wrap(cek, iv, contentCryptoScheme, config.getCryptoProvider(),
                      config.getAlwaysUseCryptoProvider(), cekSecured);
      }