poor handling when encryption key is missing or wrong

[jswidler]

The program panics if you give it a bad key, or probably if there is a file in the vault that is corrupted / encrypted with a different key. It should provides better error messages, and protect users from accidentally using the wrong key by verifying the key on set-key through some new mechanism.