Consider recrypting only files that needs re-encrypting

[frlan]

When changing e.g. a password inside secrets and having a number of secret files, all files are getting re-encrypted, too. Even though this makes sense, this is adding more complexity on merging different branches by increasing number of non-default mergeable binary blobs.