Regarding the package in x/crypto that implements the chacha20poly1305
AEAD: golang.org/x/crypto/chacha20poly1305
Looking at the code, the only field in the AEAD’s struct is for the key, which is never updated during encryption/decryption. Should the documentation be updated to indicate that the Cipher is thread-safe? Or is that too much to promise for backwards compatibility?