zncrypt installation idempotent