[encryption] check if the provided password is really the current log-in password

Verify that the new password is really the current login password from the user before updating the private key password.

fix #11667
if I identify a state I like to set the value explicitly, independent from the default value. You never know when something will change, default value, code path,... Think it makes the core more robust to set the values explicitly independent from the default value.