another minor reshuffle of the decrypt command