Unwrap SecureStream, better decorating API