Password-based file encryption (scrypt + secretbox)