Somehow missed a hunk when staging.
While we're at it, added a commit to fix a loosely related possible failure mode.
Fix decrypt_file
================
Same problem as 58c2ae2, finalizing in a loop.
I simply didn't bother to test the decryption, which has the exact same problem. Trivial to fix.