Make encryption update more robust

In some cases the encryption key might not be set (with unencrypted keystore,
such as when only storing private keys, cf. SequelAdapter#secure?).
Don't die in this case. Also check if there's anything to do -- return
immediately if the keystore is empty.