Encrypt / Decrypt update
Note that this probably will break backward compatibility so unencrypted storage before updating is required.