locking down the encryption, still work to do.