fn looks_protected(raw: &[u8]) -> bool
Whether a message might be protected: cheap, before any key is read.