Simplify re-encrypt logic

- separate auth_model_spec and auth_config_model_spec
- consolidate fix_auth#hardcode logic with rencrypt logic
- encrypt_version_{1,2}(str) -> encrypt_version(str, #, key)
- decrypt_version_{0,1,2}(str) -> key.decrypt64(str)
  (it was a partial implementation of decrypt)

https://bugzilla.redhat.com/show_bug.cgi?id=1159009