FEATURE: encrypt create key file and returns path; decrypt takes a file path and reads key string from it