add an option to encrypt all existing log entries