fix decrypt in case secretbox_open fails