only encrypt/decrypt if source is newer than target