My concern with using a special string is that it might be hard to see that you're not working with the real decrypted value. A `warn` might work for console usage, but unfortunately, those are invisible from a Rails app.