oops, add -debug_decrypt option which was accidenatally left out