Add a WithoutEnvelope option

github.heygears.com.hashicorp.go.kms.wrapping.v2.types.proto

@@ -146,6 +146,9 @@ message Options {
 
   // WithoutHmac specifies that an HMAC is not necessary for the mechanism, even if marked as "required"
   bool without_hmac = 100;
+
+  // WithoutEnvelope specifies that encryption should be over the plaintext rather than using an envelope encryption pattern
+  bool without_envelope = 110;
 }
 
 // SigInfo contains information about a cryptographic signature

options.go

@@ -156,6 +156,16 @@ func WithoutHMAC() Option {
 	}
 }
 
+// WithoutEnvelope requests a 'raw' encryption, rather than an envelope encryption
+func WithoutEnvelope() Option {
+	return func() interface{} {
+		return OptionFunc(func(o *Options) error {
+			o.WithoutEnvelope = true
+			return nil
+		})
+	}
+}
+
 // ParsePaths is a helper function to take each string pointer argument and call parseutil.ParsePath,
 // replacing the contents of the target string with the result if no error occurs.  The function exits
 // early if it encounters an error.  In that case no passed fields will have been modified.