1. Add server side encryption/decryption; 2. Move all scope related callback logic into .