[NX-601] Make encrypted record-id obfuscator the default