client: only decrypt/sync is_valid formats