encryptor now defined as lazy service