cli: Make guard rescue broader
cli: Make guard rescue broader

`Slop::Error`s are not `RuntimeError`s, so this was causing some error
messages to leak.

Also, check for the debug flag using safe navigation.

kbsecret/kbsecret,kbsecret/kbsecret,woodruffw/kbsecret