handle encrypted EBS