client-side crypto uh oh