if there is an encrypted part, and it decrypts successfully, decrypt it before checking for sigs and pubkeys (#3)