fscrypto: add authorization check for setting encryption policy