Use more secure encryption algorithm for AESBinaryManager

Before Nuxeo 10.3, the encryption used was based on AES/CBC/PKCS5Padding which has been found to be insecure (susceptible to padding oracle attacks). Starting with Nuxeo 10.3, a more secure encryption algorithm, AES/GCM/NoPadding , is used. If you're migrating data from an earlier version and therefore still need to use the old insecure encryption algorithm, you must add the option useInsecureCipher=true to the nuxeo.core.binarymanager_key in nuxeo.conf . See https://doc.nuxeo.com/nxdoc/implementing-encryption/#filesystem-aes-encryption for details.