Pull out the one-time section of zncrypt setup