write operation can detect that it's in the encrypt folder