use custom config section for encryption key