use clearCryptPwd() where appropriate
fix bug handling encryption on first created md