I'm guessing we're sure this returns NONE or AES256 as the only two possibilities?