switch snapshots to threefish

Use threefish instead of twofish to encrypt backups. This has the additional advantages of removing overhead and allowing random-access decryption. However, snapshots that we created during testing will now be invalid.

Closes #3548 (closed)

Closes #3563 (closed)