default to no encryption