A colleague of mine let me know about an easy way to use .NET's decryption mechanism from the command line. From the directory of the framework version, issue the following command (replace filename and path where appropriate):
C:\WINDOWS\Microsoft.NET\ Framework\v2.0.50727>aspnet_ regiis -pdf "filename" D:\path\
Encrypting configuration section...
C:\WINDOWS\Microsoft.NET\
Encrypting configuration section...
Succeeded!
Neat!