Easy to avoid. Ask the user to put it's own decyrption key coming from their own console.