warn if v2_key exists with meaningful error

fix_auth (the most common place to generate a key) tries to provide
a user context that they should not just remove the file.

The cli is more powerful, so a --force option is provided

- cli only replaces v2_key if --force
- cli does replace v2_key if fetching from remote
- fix_auth displays warning. User must backup key first

/cc @Fryguy @jrafanie 
I force too generic of an option name?  What if you need force for something else besides encryption key in the future?  This one downside to a CLI that does *everything* for setup.