catch errors during initial encryption
catch errors during decryption
don't block login forever if we are stuck in the middle of the initial encryption