Define the access boundary first
Use this workflow only for files, fields, and credentials that you are authorized to handle. Keep the original input, a recovery copy, and the working output distinct. Before choosing a tool, write down whether the handoff needs whole-file encryption, selected-field protection, PDF conversion, an open password, permission limits, or an authorized removal of restrictions. A password or encrypted bundle is an access mechanism for the stated scope, not a universal security guarantee.
Match the operation to the artifact
Use aes-encryption-tool when the complete text or file should be encrypted and later restored with the associated IV-based bundle. For a CSV, use field-encryptor for named columns and field-decryptor for a controlled restore check. For an Excel workbook, use excel-field-encryptor and excel-field-decryptor, then inspect the restored workbook in the application that will receive it. In both field workflows, verify that non-target data and the file contract survive the operation.
Treat protected PDFs as two different tasks
If the goal is to read a password-protected PDF, encrypted-pdf-converter needs the correct authorized password before it can export Markdown, JSON, or text. Compare representative pages, headings, tables, and text spans after conversion; an opened file does not guarantee complete extraction. If the goal is a new delivery policy, use pdf-password-protector or pdf-permissions-set to apply the approved open-password and permission settings. Use pdf-permissions-remove only after the document owner has approved the change.
Verify the handoff in context
A useful acceptance check has two parts: reversibility and compatibility. Restore an authorized sample and compare it with the source, then open the final file in the named PDF reader, spreadsheet application, or downstream parser. Record changed metadata, unsupported features, permission behavior, and residual uncertainty. This produces a defensible delivery record without claiming that a local tool run replaces key management, governance, or compliance review.