Credential encryption: separate pw UI from load/save. Re #9