If no hook should be run before syncing (or a user-defined hook) then the warning should fall under that and not be run as part of it. Additionally takes care of multiple decryption requirements in a row.
Reflecting the somewhat expanding scope of the module, renamed it to office. Still keeps the old files and setups but also got a new README file.