- with an encrypted part and ``--decrypt`` is set, if notmuch finds a
- ``session-key`` property associated with the message, it will try
- that stashed session key for decryption.
+ with an encrypted part, if notmuch finds a ``session-key``
+ property associated with the message, it will try that stashed
+ session key for decryption.
+
+ If you do not want to use any stashed session keys that might be
+ present, you should pass those programs ``--decrypt=false``.