[encryption] check if the provided password is really the current log-in password

Verify that the new password is really the current login password from the user before updating the private key password.

fix #11667