Remove the --add flag from git config

This would have allowed duplicate keys if not for the safety checks, but
it shouldn't be here, as eventually we'll want to support rekeying.
Add a --flush-credentials option

All previously decrypted files are re-encrypted.