Reversed automatic re-encryption of settings on cipher config/key changes.

Unable to ensure change happened before setting was used without ordering
initializers. Better to allow developer to script change.