tests: make bash usage explicit
testing: add reencryption to TODO