add option to encrypt an existing unencrypted data file