support providing multiple secrets, always encrypt with first, attempt decryption...