configure encryption for xkms