t348 - graceful failure if no encryption key available