better encryption options around state values