add encrypt-file command, see #41
encryption => decryption [ci skip]
fix decrypt command
actually decrypt
consistent use of -r and notes about it
improve password and token examples [ci skip]