there's a typo here, consequently encryption is always off