Note to myself: use sops/age instead of git-crypt in anything in the future.
If you run git-crypt init on a repo that is already inited but not unlocked, I think you need to delete the repo to get a clean working tree again as all git reset/stash/checkout/... commands fail because it chokes over the changed git-crypt file and git-crypt won't unlock because the files have been tempered with...