blobs already encrypted so need to use keys to download