confirm and decrypt protected notebooks on export

[gordonwoodhull]

We can't save notebooks in an encrypted format. We should confirm with users that they want to save unencrypted and then do so.

Unfortunately the API doesn't distinguish between binary assets and encrypted notebooks (it's raw or no) - shouldn't be too hard to add the ability to decrypt but leave binary assets encoded.

Follow up to #1885