encrypted-keys: fix Opt_err/Opt_error = -1