Needs re-encrypt?

• Added needsReEncrypt(): bool to see if the ciphertext was encrypted using an inactive key and thus should be re-encrypted ("key rotation") with the currently active one (#3, thanks @stpnkcrk!)
• Tests, at last!