fix first time encryption after app was enabled