Generally, inside of verifyAndDecrypt if there is a verification error we fire that error, otherwise cannot decrypt is more generic of an error - either way, the user is in a state where they are nto handed any decrypted data.