encrypt targets/keys