be more explicit about when securedrop receive-end encryption happens. (after it's submitted/when it's received, rather than "when it is submitted"). #488