backport trashbin: enable trashbin to handle encryption keys