're-encrypt' allows us to re-encrypt an RO encryption to a different set of owners and labels. Currently two delegations are sufficient to carry out this operation.
* vendored code.google.com/p/gopass as package cmd/ro/gopass