Fix --rekey command

[mbartosch]

Hierarchical rekeying not yet implemented.

Iterate through all entries, including those in subdirs.

• do NOT encrypt unencrypted entries (!)
• consider sanity checking: do not reencrypt symlinked entries (possibly already rekeyes, but symlinked)