Add a mechanism to distinguish between trivial encryptions and nontrivial encryptions at the secret level

Maybe `secret.conceal` should have a `trivial` attribute that denotes this, otherwise server-side uses of `secret.conceal` on static plaintexts (say, for resolving type mismatches) would cause the noise analysis to think it's a fresh encryption rather than a zero-noise encryption.