encrypt header