This is really the only difference between ```Create``` and ```Change``` modes of the passcode flow (the instructions displayed). The existing functionality already does the re-encryption if a passcode already exists. Also, we don't need to ask for the old passcode, since if it was required due to timeout, the passcode controller would've already come up.