more explicitly type encryption status