adding a verification step to shell ingress; switching discovery of encrypted puffs
next step for encrypted puffs