update some make glue
merge 3.0.3 from Twitter

- [SECURITY-14609]: accept encrypted input with spurious whitespace
- clarify that '-k' can be used for decryption as well