add docs to #decrypt_value