return the encrypted cache key, not the contents