client side encryption

so the user must not trust the server