Use "salt" as encryption switch. If set (even blank) hostdir will be encrypted.