Re-enable file transfers

With the suggested changes from the Least Authority audit to avoid key/iv re-use.

This addresses #575 and #576.
#577 should be fixed before merging.

/cc @daira @zookoatleastauthoritycom @nathan-at-least