Fixed two bugs, the first of which is mine:

    - If a signed digest was incorrectly written for a non-file, do not leak or attempt to validate the digest -- ignore it.
    - If no new data is encrypted, but the output buffer is not empty, there is still data that needs to be written -- don't exit.