Includes breaking changes to the decrypt subcommand:

• The encrypted matched data argument is now a positional argument.
• Both the encrypted matched data and private key arguments now expect a
  filename. Passing - as the positional argument leads to the data data being read from stdin.
• The argument --private-key-stdin has been removed.