toggleable stream encryption