Don't we want to at least log that decryption failed? Or is this handled from the caller?