dotfiles: add encryption aliases