The Readme says secret can be "a string or array used for encrypting cookies.". But the code doesn't handle arrays so fails here:
if (algorithm === 'aes256' && key.length !== 32) {
const errorLabel = `A 32-bits key must be used with aes256. Given: ${key.length} (${key}-bits)`
throw new Error(errorLabel)
}