Internal calls to secretbox_* functions should have their exceptions wrapped

For developer experience, I don't want to see SODIUM_CRYPTO_SECRETBOX exception messages. The most common exception I can generate as a developer is passing a key with the wrong number of bytes.

This should be wrapped by a friendly exception message that explains the number of bytes was wrong.