changed 'gpg_decrypt_must_succeed' default from False to True