refactor post service, remove client encryption