add script to regenerate encryption key