properly format .travis.yml
add --override and --append to encrypt, make default behavior depend on key