host should not be encrypted