Various improvements

 * Make script more crash-safe when manipulating directories
 * Create crypto dir using the correct password when first encountering it
 * In-place rsync for less S3 usage (and assume that s3fs does timestamps correctly now)