refs #2929 - generate encryption key and encrypt data in postinstall

Tested clean installs and upgrades on Wheezy successfully.