forward encryption is now working