add device encryption