encrypt/decrypt could work with keys that are registered as defaults

[richfitz]

this is a departure from the current interface but would allow the "data" workflow to be a bit more seamless