Error on failed decryption, and try not to leave an output file.

* onetime
  (PadDecoder.decode): Document when IOError is thrown.
  (main): Handle IOError when decrypting.

* check.sh
  ("failed decryption should give an error and create no output"): New test.

* TODO: Remove this item.