Performance isn't crucial in this code path.  Can we change this to Injection[Base64String, String] and just use allCatch on inverting the decode?

I don't like leaving this unsafe code in when perf isn't killing us.