only start migration if the encryption was initialized; allow to overwrite keys if no files exists