full rewrite to normalize CLI and improve validation
fixup!
app CLI now imitates tar
handle directories and files in _ask_overwrite
be quiet on ctrl-c
generate new keys with a unique filename
--try-all flag to search for decryption key in set