Remove conn and user_data from encrypt/decrypt/hp_mask callbacks so
that they can be used without conn.