mk_encrypted config script