Use DJB's NaCl's secretBox to decrypt manifest