encryption/kdm-decrypt.rb: Option --as-triple