Note that this removes the `-M` flag from `--encrypted` as it conflicted with the global flag and adds it to `--metadata`.