Move to streaming decompression API

This allows us to detect whether the (compressed) object got corrupted with
trailing data, which the plain decompress() api doesn't allow.