[cli] Add support for encrypted repos