New encrypted export

* switch to xstream for serialization and deserialization
* use our own custom file format for encrypted backups

file format:
```
4 byte header length
header (serialized EncryptedBackupHeader protobuf)
encrypted xml contents with messages and identity key
```