doc: clarify that --encrypt refers to public key encryption