--output-dir option to decrypt into specific directory
improved shutil move code on decrypt
better naming of custom Error object
treat absolute paths like tar; dont allow relative path above cwd