reencrypt: remove option, do automatically