add Obnam backupEncrypted

This after I typoed an obnam setup and accidentially had a repo that was
backing up non-encrypted.