Verify, by inspection rather than trust, that `suminhthanh/zerobin` is actually zero-knowledge: the decryption key and plaintext never reach the server.