specify subdir in decrypting key