Corner case: what happens if:
1. the user home exists with unencrypted files inside (maybe due to a migration)
2. the admin enables encryption
3. the admin creates this user (home folder will be reused)
4. the admin changes the password before that user could log in

I'm just inferring this from the code, wondering if checking for "/files" existence is enough.