fix: encrypt/decrypt only if PUT/GET request