Using elif here means our branch coverage complains since the case where it's not encrypt or decrypt is never hit. Should we change this to just an else?