dev: add crypt wrapper to keep ad rule safe