Maybe we should have a CryptKeeperError? Might be a good idea to namespace specific errors.