ignore tok.enc and sec.enc