change default encryption key

will remove it in future and require users to set it manually in their
configuration