NULL replaced with AES

No encryption is not a valid alternative, and AES ciphers are preferred by MVK SSO.