always get a string in cryptlib errors. Places that don't get an error string should now since it should always be useful.