use weak encryption for now
add start-zkfc-bg rule
add enctypes to EXAMPLE.COM, as well as outside