bcfg2-crypt: handle error when encrypting properties with multiple keys