Support decryption using old encryption secrets

new() now supports and optional "old_secrets" attribute.