update storage API to do decryption