move all encryption to backend