Implement some check on decryption

[chmac]

We can probably test if the object was successfully decrypted by making sure that it appears to be a git object. There's a header on objects if I remember correctly.

We should be able to throw in the event of using the wrong keys.