agent: ignore -encrypt if provided when keyring exists