WIP: encrypt the bs key
WIP: omg