Option "enable automatic de- and encrypt" enabled by default

[dkmla]

We have an issue with people forgetting to encrypt vault files before commit.
That is why it would be a great optimization, if the "enable automatic de- and encryption" was active by default.
It would make more sense that you should disable this feature if you don't want to use it, than enable it to use it.