Two way encryption, permission check