encrypt
use cb from config