use -1 as failure flax decoding password iterations