decrypt-file: Only set up the second pipe if the passphrase is needed