refuse login as long as the initial encryption is running