change decryptUnknownKeyfile() to decryptKeyfile(), we always use openssl_seal