* update the display of decryption failures due to failed trust requirement * add test for not showing shield