should we add a test here that the encrypt stuff actually works when the flag is set?