make decrypted copy of db and mb without pwd