full rewrite to normalize CLI and improve validation
be explicit on modes
app CLI now imitates tar
handle directories and files in _ask_overwrite
be quiet on ctrl-c
generate new keys with a unique filename
--try-all flag to try all decryption keys in cwd
--output-dir option to decrypt into specific directory