fixes #2929 - generate encryption key and encrypt data in postinstall