if no pw when encrypting, do not reencrypt
start to think about mocking/implementing the back end