reduce logging from failed decryption with decrypt=lax
do not bruteforce Properties decrypts with unknown passphrase

this greatly decreases startup time with lots of data encrypted with
missing passphrases