* commit 'cf2895ece9b80c36fe7d279777ea4a869f9bf2df': Add constants so we can distinguish decryption failures