Config param recordsmax; encryption work-in-progress