decryption now works for any alias in the current identity