The builders of the best encrypted messengers declared decentralized group encryption impossible. The Marmot protocol proved them wrong.