Also document how to encrypt previously unencrypted users.

Also, maybe a code sample on how to use not in the context of accounts?