client: further handling of failed decryption