Ignore locally decrypted dotfiles.
Add the first encrypted dotfile!
Put decrypted files in a local "plaintext" directory.