- make an update command that re-encrypts all the files if group stuff has changed for them