fix qcks again - move it to late_start group so that it gets started only once and AFTER decrypting