Added encrypt_system_ctp.  It was recently updated so that you pass it the folder of all secret keys and it determines which secret key to use to decrypt. Might need to change this for version control.