How to decrypt form submissions when we are not asked for the key?