Fields are decrypted as they come in, so they should be decrypted_fields, not encrypted_fields
Add serket configuration initializer and test public key