Change xor's usage.

The argument is no longer a string, but a file (allows more secure usage
of xor).
Update README.