default encrypt and preserve acl