[encryption] update keys recursively if a folder was moved

fixes the root of the failing encryption tests. cc @PVince81