agent: -encrypt appends to keyring if one exists