Properly handled when .decrypt fails with an invalid sig, reformated TODO's for grep'ing