* allow multiline password messages * BouncyCastle/JCE isn't always consistent in wrong password / wrong key error message; treat both as wrong password