Encryption is off by default. It is switched on by deployment scripts.