The Environment only picks up the "bootstrap" property source when the parent context is set, and that was happening at order=0. Moving it to a higher order than the decryption initializer makes it possible to decrypt properties in bootstrap. Fixes gh-84