we don't want to wipe people's existing keys without notifying them. for now, we'll treat it just like the unencrypted database... if they want to upgrade they will have to clear data or re-install.