don't remove encryption without asking