Tailscale state file encryption no longer enabled by default