https://footprint-blog.ghost.io/client-side-decryption/