encryption by default, up version bump