I think this will break if encryption is disabled (no key defined) as the `_in_db` getter is only defined when encryption's active.