auto-decrypt for keys