fix reading of encrypted and signed central directories