full rewrite to normalize CLI and improve validation
be explicit on modes
app CLI now imitates tar
handle directories and files in _ask_overwrite
be quiet on ctrl-c
generate new keys with a unique filename
--try-all flag to search for decryption key in set
fixup! f7b1019378f8ed475c8ab83bd13e2d99a941ceb4