Thanks, that's a very reasonable suggestion. It's easy to add --decrypt option to the main tool, so it'll decrypt encrypted archive without executing anything. I'll implement it.