keys: add new key-type encrypted