add encap realhost, certfp and account support