Add transform for encrypted refs