encryption paths work now