Handle decrypting existing encrypted files

Telling users to force a checkout can be dangerous as it's destructive
if there are uncommitted changes in the working directory. Instead,
we'll perform a safety check ourselves to only initialize transcrypt in
a clean repository so the script can do the forced checkout directly.