key based auth needs a manual encryption callback