fixed #141 - allow the platform session to contain encryption key as a property,. it doesnt matter if the platform can get the key, because all they can do is unlock their own data... possible one platform can grab data from others, but only for that session