Allowing the `--go` and `--decrypt` flags to be in either order

not least because it's totally valid to specify `--decrypt` without
specifying `--go`.