[Encryption] Only create new key if no other key exists

If the admin changes a users password and no recovery key exists we only generate a new key pair of no old key pair exists. This way the user can still recover his old key if he remembers the correct password

fix #6204