Encoded key is unencrypted, reconstituted key is too

[ClashTheBunny]

I think this is probably obvious to many people, but this also strips the encryption of the secret key. It would be nice to be explicit about that.

If you don't add it back after you undo the melt, you may be confused as to why it's no longer asking for a password or that errant npm package was able to ship it to a hacker. Maybe add that as an optional step after?