encryption by default