[encryption] update keys recursively if a folder was moved (oc6 backport)

OC6 backport for #9668 

cc @PVince81