exposing encrypted option instead of scheme