initial filecrypt fixup