encrypt: require big ugly I_AGREE configuration in order to use it, so people don't get misled

Change-Id: I4259e423d6a4b733f353a1e8792c6b8cb3c95c43