The extra encryption is mostly for keys that I use with the passwords on Keepass.