use consistent name for the encryption key