add protected to encryption