crypto: actually stash session keys when decrypt=true