Import account-restricted encrypted JSON export into vault after changing master password and rotating keys?

… or at least make the password-protected encrypted JSON export the default/pre-defined choice… (of course, that wouldn’t prevent bad choices as effective as your request…)