OK, I added some more sanity checks also:
* There are exactly 2 body parts.
* First body part is application/pgp-encrypted.
* Second body part is application/octet-stream.