I'm not wild about how this attribute gets materialized at the end. At a minimum it should be an error to access it before the cipher is finalized.