CLI: make self-encryption optional
CLI: make self-encryption optional

- plumb options through to engine
- tested successfully via the command line
- test in engine/
- fix C/I tests for new encryption arg format

keybase/saltpack