the OP only crypts the appropriate number of times depending on which layer (hop on the path) it's for/from. svn:r262