People keep saying this, but how does the untrusted system the code is being executed on decode the output stream without knowing the key?