fix bug handling encryption on first created md
use clearCryptPwd() where appropriate