fixes #6: ability to set encryption key timeout