Add more tests; ensure guards are quoted before used in decrypt

Guards could contain regex special characters like '*' and '.', so make
sure these are quoted/escaped before they are used in the filter in
decrypt.