make encryption key filepath configurable