encrypt messages only on client side from your browser